Papers please.
Paste a Bearer token to mint a session cookie.
Bearer
Eventually we'll get a real OIDC