Project control room

Todos, unresolved questions, architecture, and the agency narrative in one operating surface.

The token is submitted once and exchanged for a secure HttpOnly session cookie. It is never placed in the URL.