Provenance work deserves a locked front door.

Welcome back

The dashboard keeps the auth token server-side. The browser only receives a protected session cookie.