Cookie-based authentication via Supabase. Authorization uses organization membership tables, not user-editable metadata.
Controlled UAT shortcut — skips password entry. Unavailable in production.