Implement secure logins, tokens, roles, refresh tokens, API protection, and modern OAuth2/OIDC using the OpenIddict