All of the restructuring, also refresh tokens
Oops, old import
Return both the user and payload

There might be something interesting in there that isn't strictly related to the user, for all I know
Less copypasting pls
Actually, nevermind, I have current_user already
/auth should work (untested)
Refresh tokens and arbitrary data in the auth response
Refresh tokens (feat. fixed authorize route)
No need for the file split anymore, it made sense before