Anatomy of the Facebook solution for mobile single sign-on: Security assessment and improvements