🔒 Secure client-side authentication

⏱️ Session expires in 24 hours

🛡️ Rate limited to prevent brute force attacks