[nilshauk]

Very much agree. Though there’s a line between implementing cryptographic algorithms yourself vs. implementing cookie based authentication.

Cryptography is something I’d leave to standard libraries. However, when it comes to authentication it might not be that hard to implement some cookie or token logic as long as the actual cryptography is handled by some well tested library.