feat: Implement Session-Based Authentication for Enhanced Security

[sriramveeraghanta]

Overview

This pull request introduces a shift from token-based authentication to session-based authentication across our application. This change enhances security and improves the integration between our Django backend and NextJS frontend.

Key Changes

• Updated the authentication mechanisms to use Django's built-in session framework. This involves modifications to the authentication views and middleware to handle session management.
• Adjusted HTTP requests to handle session cookies instead of bearer tokens. This includes updates to API service configurations to ensure cookies are sent and received correctly with requests.
• Implemented separate routes for handling sign in and sign up condition.
• Separated the God Mode as a separate NextJS app called admin.
• Implemented the new onboarding screens.

Session management

• Sessions do not use the django default django_sessions table but a custom table for storing session information that include the user_id and the device_info for storing device specific info.
• Session cookie is a random 128 character string generated by Django.
• App Session cookie is valid for 7 days whereas the admin session cookie for God Mode is valid for 1 hour and both will keep on updating for every request that is made to the backend.

Screenshots

Before	After