What is included
- Account system with password hashing and session cookies
- Developer access request + admin approval
- OAuth authorization code flow with optional PKCE for public clients
- Consent screen for third-party websites and apps
- Opaque access tokens + user profile endpoint
- Weglot-ready pages for auto translation