Authenticated owner session

Sign in

Use the configured owner identity. No public registration exists for this application.

Behind IIS and Cloudflare, the production session cookie should stay `Secure`, `HttpOnly`, and host-scoped to `spend.korivash.com`.