Provides AuthContext. The session starts as the stored one and follows it when another tab changes it. The server checks it on mount and whenever the tab regains focus: a 401 ends it, and a user or settings changed on the server replace the stored ones. A session from before media tokens gets one.