Register stores a bcrypt password hash; access JWT + opaque refresh in httpOnly cookies.
Already have an account? Sign in