My web application is nearly ready to launch, but the user-authentication module is still missing. I need you to wire up a straightforward, secure email-and-password flow that covers sign-up, log-in, log-out, and password-reset. The rest of the codebase is already in place; you will receive full repository access so you can slot your work straight in and follow the existing style. Key points • Only email + password is required right now. • Sessions/tokens must be stored securely so protected routes stay locked down. • Clean, well-commented code and a short README that explains any environment variables and migration steps are part of the hand-off. I’m open to layering in social or two-factor options later, so structuring the solution with future extensibility in mind is a plus. Once everything compiles and the tests I’ll provide pass, the job is done. If this fits your skill set, I’ll share the repo and we can get started.