Authorization
Every action is checked against a right that your site grants and controls. The machine that does the work checks it before acting. A right can be narrowed when it is passed on and taken back at once. There are no shared passwords and no accounts to phish.