Payload local auth
One active Mojo session is allowed per user. A new login replaces the previous app session.