Implement custom auth using crypto.scrypt password hashing and UUID session tokens. Includes login/logout/session endpoints, preHandler middleware that skips public routes, and automatic default admin creation on first startup.