🔒 Secured with bcrypt + JWT + 2FA