I Audited a Node.js Project and Found SHA-256 Password Hashing. Here’s What I Changed.

Or how a simple code audit turned into an authentication upgrade.