Can’t you sign something if you find the same user logged in in the browser session?

And if you find a webln send a 1 sat instead of captcha and if no webln some POW?