- OAuth2 -> support refresh tokens
- Localize all the things
- show app documentation somewhere besides final page of setup
- Logins as jobs?
- OpenID Connect - oidc-provider
- Login from new IP notifications