Frontend → /signup → Validate → Hash password → Save user → Create JWT → Store JWT in cookie → User logged in
Frontend → /login → Validate email → Check password → Create JWT → Store JWT in cookie → User logged in
Frontend → /logout → Remove cookie → User logged out