Create an account
Public registration is limited to students. Teacher, admin, and super-admin accounts should be provisioned internally.
Production notes
Passwords are hashed with bcrypt before persistence.
JWT sessions keep API requests stateless and horizontal-scale friendly.
Role checks happen in middleware before a dashboard renders.