Complete Web App Authentication

My web application is nearly ready to launch, but the user-authentication module is still missing. I need you to wire up a straightforward, secure email-and-password flow that covers sign-up, log-in, log-out, and password-reset. The rest of the codebase is already in place; you will receive full repository access so you can slot your work straight in and follow the existing style.

Key points
• Only email + password is required right now.
• Sessions/tokens must be stored securely so protected routes stay locked down.
• Clean, well-commented code and a short README that explains any environment variables and migration steps are part of the hand-off.

I’m open to layering in social or two-factor options later, so structuring the solution with future extensibility in mind is a plus.

Once everything compiles and the tests I’ll provide pass, the job is done. If this fits your skill set, I’ll share the repo and we can get started.