Auth: sessions, JWT, OAuth

This lesson is part of the year-long Code Academy Alfred path. Goal: understand httpOnly cookies, OAuth, RBAC intro in real web / mobile-web design conditions.

Practice immediately: rebuild the example, then change it. Memory comes from active repetition, not passive reading.

If you get stuck, use Cursor with a precise prompt (context + goal + constraints), then explain the generated diff yourself.