JWT auth complete; server cleanup; profile stub added; MainController bumped up to AppController