Adjust response after POST to /login.
Send 'aight' after login.
Redirect after successful login.
Explicitly send 200.
Add GET for /login.
Replace Strategy.
Do exactly as the tutorial says.
Do not redirect.
Send *something* after successful login.
Remove sessions, use access tokens.
Read email address during registration.
Rename `createdAt` to `created_at`.
Send username upon logout.