Build a PHP login and registration system from scratch with password hashing, brute-force protection, remember me, session security, and CSRF tokens. Full working code, no frameworks.