Removed the index handler
Implemented a handler for the creation of access tokens
Implemented an authentication middleware for protected routes
Ignored the public/private key pair for JWT signing