Does Kotless have an opinion on user authentication and session management? Is that part of the Terraform model, or should we just roll our own?

Right now you should roll you know, unfortunately. But yeah, we will support integration with Cognito in nearest future