Sign in

Web sessions use HttpOnly cookies. Desktop and mobile use Bearer plus refresh tokens. Pending accounts cannot sign in until approved.