- Login with `/login` (+ `/logout`) with a signed session cookie.
- New options `--secret-key` and `--session-days`.