December 27, 2025#AuthenticationAuthentication in Next.js without pain: sessions, cookies, and trade-offs