Welcome back

Email + password now; social login can be wired via Supabase later.