create a model for access codes -code will not be valid after 24 hours-
add 4 endpoints as follows:
1- POST /admin/accesscode returns a code
2- POST /user/accesscodebody: {code: "*******"} returns a token to be stored in the browser
3- POST /admin/signupbody: {username: "admin", password: "admin", token: "*****"} won't be accessible in the browser, will only used by developers to create and admin, a token must be provided.
4- POST /admin/loginbody: {username: "admin, password: "admin"} should redirect admin to generate code page
POST /admin/accesscode
returns a code 2-POST /user/accesscode
body: {code: "*******"}
returns a token to be stored in the browser 3-POST /admin/signup
body: {username: "admin", password: "admin", token: "*****"}
won't be accessible in the browser, will only used by developers to create and admin, a token must be provided. 4-POST /admin/login
body: {username: "admin, password: "admin"}
should redirect admin to generate code page