I have questions about how to implement a better form of authentication, which is secure and allows for "sessions" or "cookies" with different names, allowing the creation of an authentication method for users and administrators separately (without the cookie of one interfira in the other) or that needs to work with roles to define the access of each one.