Auth uses an in-memory better-auth store. Sessions reset on cold starts. Use any email and password (8+ characters) to sign in — no environment variables required.