General login and session security hardening

Improved

• General login and session security hardening
• More reliable billing usage tracking under load
• Feature retention now runs as intended, keeping storage bounded
• Smaller, more secure production deployments