Project: lowdb
Task (moderate): 1) POST /api/auth to login into system with example payload {username: 'xxx', password: 'xxx'} and example response { success: true } 
2) GET /api/auth to get the full information of current user, example response {'username': 'xxx', 'role': 'xxx', 'coin': xxx}
3) if not login, return 401 status
4) use 'jose' to generate JWT in cookie by key: 'TOKEN', the payload of JWT follow example{'username': 'xxx', 'role': 'xxx'}
5) secret is 'WEBBENCH-SECRET', use default HS256 algorithm and expired in 1 hour