static str secret_key = skstr("GenerateASecretKeyHereForLoginTokens"); // TODO not very secret (must be >= 32 bytes for HS256)