Review this snippet of Python code handling user authentication. What security flaws can you find, and how would you fix them?
