Account access

Sign in with CAPTCHA and signed HTTPS requests.

Browser login requests are CAPTCHA-gated, signed with a lazy-loaded WebAssembly HMAC helper, and can persist a short-lived session only when requested.