feat: auth

Chiquita Ahsanunnisarequested to merge
feat/auth into development

cookie is still unsafe (counted as third-party cookie)

Merge request reports