Sign in

PoC: server-side credential check + secure cookie session.