I analyzed 30 authentication providers so you don't have to