Most of these have already been addressed in PR #95, we just need to change the JWT from a header to cookie on this line and then use express-jwt to get it from the cookie in this file (I think it defaults to looking in the authorisation header), and then we need to add tests.
We need sessions for the users to be logged in directly to the OTP. Granualar steps are below.
/register
/login
Most of these have already been addressed in PR #95, we just need to change the JWT from a header to cookie on this line and then use express-jwt to get it from the cookie in this file (I think it defaults to looking in the authorisation header), and then we need to add tests.