Secure account access
Real login with database-backed users and server sessions.
This version stores users in MongoDB, hashes passwords, and keeps the session in a secure cookie instead of browser storage.
Password hashing with bcrypt
MongoDB-backed user records
Plan and Stripe status tied to the account
Current status: No active session