Authenticate
Authenticate validates user credentials and creates a session
Returns session information and sets a session cookie for subsequent requests
Authenticated user information Contains user_id, username, role, password change requirements, and audit timestamps
Unix timestamp (in seconds) indicating when the session will expire Session expiry is extended on each request (sliding window)