katenaOS auth server — Better Auth under /api/auth, login at /login