Notes on wiring Google OAuth with Auth.js, protecting routes with middleware, and keeping the authentication flow readable.