Airbnb cut authentication code by 60% with server-driven flows