nostr:npub1jzv3zu6jdkqdxe2stp3skp8z64ffjcuw6uw2a2du9xfhs9ua6wcscx76na nostr:npub1kpwlxpzkxfmuxjmzc2wp3rf9vjg0sgydmlhsnrgqr3maf59h86qqdxxzz4

authentication should be baked into Auth cookie, encrypted, protected

session data should be in local storage and sent when needed as an encrypted object