Sign in once, then keep the timer flow scoped to your own data.

This app is personal, but it still needs a real identity layer. Auth0 now owns login, logout, callback handling, and route protection for the web app.