i'm getting...something...in the cookie now

cmd/server/main.go

@@ -7,15 +7,13 @@ import (
 	"net/http"
 	"os"
 	"path/filepath"
+	"time"
 
+	"github.com/alexedwards/scs/v2"
 	"github.com/joho/godotenv"
 )
 
-func handler(writer http.ResponseWriter, request *http.Request) {
+var sessionManager *scs.SessionManager
-	templ := template.Must(template.ParseFiles("./web/dist/index.html"))
-
-	templ.Execute(writer, nil)
-}
 
 func main() {
 	err := godotenv.Load()
@@ -23,20 +21,27 @@ func main() {
 		log.Fatal("Error loading .env file")
 	}
 
+	// handle authentication
+	sessionManager = scs.New()
+	sessionManager.Lifetime = 24 * time.Hour
+
+	// handle frontend views
 	webDir := "./web/dist"
 	fs := http.FileServer(http.Dir(webDir))
 
-	http.HandleFunc("/", func(writer http.ResponseWriter, request *http.Request) {
+	http.Handle("/", sessionManager.LoadAndSave(
-		if request.URL.Path != "/" {
+		http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
-			path := filepath.Join(webDir, filepath.Clean(request.URL.Path))
+			if request.URL.Path != "/" {
-			_, err := os.Stat(path)
+				path := filepath.Join(webDir, filepath.Clean(request.URL.Path))
-			if err == nil {
+				_, err := os.Stat(path)
-				fs.ServeHTTP(writer, request)
+				if err == nil {
-				return
+					fs.ServeHTTP(writer, request)
+					return
+				}
 			}
-		}
+			handler(writer, request)
-		handler(writer, request)
+		}),
-	})
+	))
 
 	port := os.Getenv("HTTP_PORT")
 	if port == "" {
@@ -48,3 +53,9 @@ func main() {
 		log.Fatalf("server error: %v", err)
 	}
 }
+
+func handler(writer http.ResponseWriter, request *http.Request) {
+	templ := template.Must(template.ParseFiles("./web/dist/index.html"))
+
+	templ.Execute(writer, nil)
+}

go.mod

@@ -3,6 +3,7 @@ module solopm.com/solopm-server
 go 1.26.3
 
 require (
+	github.com/alexedwards/scs/v2 v2.9.0 // indirect
 	github.com/golang-migrate/migrate/v4 v4.19.1 // indirect
 	github.com/joho/godotenv v1.5.1 // indirect
 )

go.sum

@@ -1,3 +1,5 @@
+github.com/alexedwards/scs/v2 v2.9.0 h1:xa05mVpwTBm1iLeTMNFfAWpKUm4fXAW7CeAViqBVS90=
+github.com/alexedwards/scs/v2 v2.9.0/go.mod h1:ToaROZxyKukJKT/xLcVQAChi5k6+Pn1Gvmdl7h3RRj8=
 github.com/golang-migrate/migrate/v4 v4.19.1 h1:OCyb44lFuQfYXYLx1SCxPZQGU7mcaZ7gH9yH4jSFbBA=
 github.com/golang-migrate/migrate/v4 v4.19.1/go.mod h1:CTcgfjxhaUtsLipnLoQRWCrjYXycRz/g5+RWDuYgPrE=
 github.com/joho/godotenv v1.5.1 h1:7eLL/+HRGLY0ldzfGMeQkb7vMd0as4CfYvUVzLqw0N0=

internal/db/migrations/2026_00_01_000001_create_users_table.up.sql

@@ -30,7 +30,7 @@ CREATE UNIQUE INDEX IF NOT EXISTS "idx_users_provider"
 INSERT INTO users
 (username,is_admin,name,email,avatar_url)
 VALUES
-('system', true, 'System User', 'system@localhost', '')
+('system', true, 'System User', 'system@localhost', '/uploads/avatars/system.png')
 ;
 -- -------------------------------------------------------------
 
@@ -38,6 +38,6 @@ VALUES
 INSERT INTO users
 (username,is_admin,name,email,avatar_url)
 VALUES
-('zombie', false, 'Zombie', 'zombie@localhost', '')
+('zombie', false, 'Zombie', 'zombie@localhost', '/uploads/avatars/zombie.png')
 ;
 -- -------------------------------------------------------------