Prototype auth — stored locally in your browser only, no real security yet. Don't use a real password. See lib/auth.ts for how to wire up NextAuth here.