Public Key Auth (WebAuthn)

[nabeelvalley]

Using Passport.js since I decided it's probably a good idea to not roll our own auth. We can also add other login strategies at a later point and this should make that straightforward

The docs on how this all needs to work together are a little scarce, so mostly just chasing error messages

• For the ability to remove auth we can basically use Basic auth with the username and password as the same

[nabeelvalley]

Progress has been kind of terrible, but I also feel that since passport is session based this won't really work for us anyway, so i'm going to see if I can do this without passport, maybe a different library