The "auth" package contains the API interface to authorize user actions - managing logins, sessions etc.