Secure by default
Your session starts and ends cleanly.
Signed cookies, CSRF protection and session rotation are part of the request lifecycle — not application afterthoughts.
POST /login
verify → rotate → redirect
Welcome back
Sign in to Kivu
Use the account created by script/kivu seed.
New here? Read the quick start