we need to do some heuristic checks and implement login challenges when we detect an anomaly. Stuff like:
  1. Logging from a new device.
  2. Logging from a new IP.
  3. Logging from a different Geo.