I would disagree here. You probably need OAuth with popular social services and implement username, password or OTP-based auth overall. For an MVP, you don't need to care about more details beyond this; it is hardly 10% of the entire effort, if not 5%.

I feel seen. It's compounded if you also need to add HIPAA row-level security compliance that spans to every form of resource.

…use Django, install auth modules

It takes like an hour. So that's a quick mvp then

[dead]