Users must be able to connect remotely from their own mobile devices.
What should the architect consider to increase the security of the current authentication solution?