Preventing an authentication hacking attack