Auth made easy and secure via JWT cookies, CSRF tokens, and password hashing helpers.