# description
Signup, login, and OAuth sign-in all resolve to this: a session token plus the account it belongs to. Send the token as `Authorization: Bearer <token>` on /api/* calls.

# properties.user.properties.emailVerified.description
Whether the account email has been confirmed.

# properties.user.properties.avatarUrl.description
Avatar image URL, when the identity provider supplied one.