Server auth demo

Cookie-based session with a JWT stored in an HttpOnly cookie. Public home, protected dashboard, login when logged out.