A: In the blog’s simple hands-on setup, users are stored in an in-memory array (or similar ephemeral store). That works for demonstration, but in production you must use a database (e.g. MongoDB, PostgreSQL, MySQL). On signup, you would insert a user record (with hashed password). On login, verify credentials against the DB, then create a session.
