Imports
authenticateRequest(request, options?)
Returns:
headers may include session/auth synchronization updates.
You must forward them in your response.
Loader/action pattern
getAuth and requireAuth
getAuth: read auth staterequireAuth: enforce sign-in by runningprotect()
