I suggest passport due to the flexibility of being able to eventually support saml, oauth, openid, 2fa, fido u2f, and more. Basic UI with minimal styling using the UI scaffolding