User-facing authentication infrastructure