0dbf8ca2cb
Covers PAM + password auth modes, localhost bypass, session cookies, service installation (systemd/launchd), and testing strategy.