- Login with `/login` (+ `/logout`) with a signed session cookie. - New options `--secret-key` and `--session-days`.