authentication-review

Review authentication implementation — login flows, token management, session security, and credential handling.