Tenant-aware authentication and session foundation.
Tenant-aware login foundation.
Create an auth user.
View active/revoked sessions.
Replace placeholder hash with bcrypt/argon2, replace beta token with signed JWT, enforce middleware, and use HttpOnly secure cookies.