BE: Signup / Login API Routes

[bonnieli]

• Create a Register route (POST)
  • this will create a new user, return 201
  • validation on the back-end - password should be atleast 6 characters, required fields (email, name), checking confirm and password are the same
  • simple password validation (>6 chars)
  • Save the JWT token in a cookie (should login user as well)
  • Use httpOnly cookies
• Create a Login route (POST)
  • verify username and password
  • return 4xx if things are incorrect
  • Save the JWT token in a cookie
• On successful auth: return token and user object
• User model, don't want to save password directly on the database (hash/salt before we save them)
• Add a basic auth middleware / decorator - we can easily create authenticated routes and get the user object