POST
/loginAll roles — returns JWT (+ 2FA for Mentor/staff)
POST
/verifyEmail OTP verification
POST
/register-mentorMentor self-registration
GET
/get-profileCurrent user profile