Tag: allows web applications to authenticate users without giving them access to user passwords