Sign in

Email/password auth with secure httpOnly session cookie.