Auth & Session
Two-tier session model: outer (cookies, kept alive by /tickle) + brokerage (created by ssodh/init, required for /iserver/*).
Two-tier session model: outer (cookies, kept alive by /tickle) + brokerage (created by ssodh/init, required for /iserver/*).