New clinic
Create the clinic owner account
Register the clinic and its authorised doctor owner. Additional staff invitations will be implemented after this authentication milestone is verified.
Security controls
Passwords are hashed, sessions use HttpOnly cookies, repeated failures lock the account temporarily, and sign-in events are audited.