master
feat: add change password endpoint and reorganize HTTP tests
feat: implement email confirmation functionality
Implement JWT refresh token rotation with attack detection
refactor: use standard JWT claim names instead of ClaimTypes