# TODO: JWT verification, role checks