Session disimpan di cookie (httpOnly).
Redirect setelah login: /dashboard