feat(auth): implement social login support, forgot password, email verification, soft delete, and HttpOnly cookies