Frontend authentication and authorization