Issues a signed session JWT and sets the httpOnly session cookie on the response.
Authenticated user id.
User role claim stored in the JWT.
JSON { ok: true } response with session cookie attached.
{ ok: true }
Issues a signed session JWT and sets the httpOnly session cookie on the response.