Auth and Guard

foldkit-auth says who is asking. foldkit-guard says what they may do. They meet at one value, the principal: auth turns a request into it, guard decides every read and write on it. Neither does the other's job, and either works without the other.

request ─> foldkit-auth: cookie ─> session ─> principal ─> foldkit-guard: rules ─> rows, writes, may
           authentication                     (User)       authorization