Single Sign-On (SSO) myths and facts