February 16, 2026#AuthenticationAuthentication in Next.js without pain: sessions, cookies, and trade-offs