SECURE ACCESS REQUIRED — present credentials to continue
// session expires on browser close · 30-min idle timeout