Check web2 account is owned by browser

[forgetso]

How does the client prove to the server that they own the account?

Do they sign a message to prove that the generated account has not been tampered with by editing local storage.