Security Guidance for All Authentication Methods