[rwth-security] storing passwords - a journey of common pitfalls