Security hardening: rate limit login, remove SESSION_SECRET, harden cookie secure flag#7

bradydibble merged 2 commits intomainbradydibble/tip-split:mainfrom

claude/security-hardening-dpam2bradydibble/tip-split:claude/security-hardening-dpam2Copy head branch name to clipboard