Design secure and stateless QR-based login for the website, where you're shown a QR code (with a random token in it), which you can then scan with the app, which makes an authenticated API request to the server associating the random token with your account, and then automatically redirects your browser session to the dashboard #yay