ideally we could use a third party service for the authentication so that they don't need to create an account anymore
or we could just utilise https://github.com/wrideveloper/siakad-sso as the oauth provider since the user of the app would most likely be polinema students