As the ideology is going towards a microservices and making each service stateless; even the session based authentication is fading away and the token-based authentication is getting more popularity.
With token-based authentication, we never have to store the session details of each user in the server that makes the scalability of servers so beautiful.
More details in below link
Below link talks about the hashing of passwords and how adding a salt to the password before hashing makes hacking difficult
