Code Cardio
Password hashing, sessions, JWTs, OAuth, and who's allowed to do what.
Runs in a simulated environment in your browser: type real commands and it responds. Part of Code Cardio lifetime access, $9.99 once.