Frontend Authentication

This page is a placeholder. It will cover cookies vs tokens, CSRF, storage choices, and UX trade-offs.