pub fn login(email: &str, password: &str) -> Result<Session> {
    let user = find_user(email)?;
    verify_password(&user, password)?;
    audit::log(&user, Event::Login);
    Ok(Session::new(user))
}

pub fn login_with_google(token: &str) -> Result<Session> {
    let claims = google::verify(token)?;
    let user = find_or_create(&claims.email)?;
    Ok(Session::new(user))
}