Easy2FA Demo

Demo only — the secret is stored in this browser's localStorage and sent to the verification API on every login for simplicity. A signed, 15-minute session token (not the secret) is what welcome.html checks after login. See src/worker.js for notes on what a production version would change.