Link web player sessions to user accounts instead of PIN-only auth. Support named player sessions with persistent identity across reconnections.