~/start
private access - for personnal use only
unlock
session 12 h · cookie HttpOnly SameSite=Strict
rate-limit 5 essais → backoff 30 s … 15 min