Authentication reference application — secure, observable, and built for a small team to iterate quickly.