Open-source auth and user management for the passkey era