Workshop access.

Signed cookie, 30-day session. Credentials live in the Railway service variables.