As of this writing, there is no authentication or authorization in sms.science. This represents the work to add both of those things.

Authentication: Who the user is. This will probably mean we get to do some shit like passwords management, reset emails, 2FA, etc.

Authorization: Who has permission to do what to which phone number. I'd imagine this will also create the concept of organizations, each of which gets phone numbers and users assigned to it, and can then manage permissions within that.