Then wouldn't servers need to trust each other? Otherwise I could use my server to log into any other server.