Why building custom auth is a mistake in 2026—and how Ory Kratos delivers flexible, schema-driven identity with pre/post hooks, phone/SMS, OIDC, MFA, and more