This is the v1 portal skeleton. In production, this will connect to a real identity system.
This will set a local session in your browser for now.
In v1 production, we will: hash passwords server-side, enforce MFA options, and issue secure sessions.