refactor: part 1 technical improvements - logging, response standards, caching, soft delete

fix: only clear the matching cookie on logout

fix: separate client/admin refresh cookies to prevent cross-session takeover on same browser

Fix sameSite cookie, show user names, home link in sidebar

Initial commit