These can be non-trivial to integrate, but consider using third party authentication like https://developers.google.com/accounts/docs/OAuth2Login.