created a profile api endpoint and proper auth middleware . using the jwt token which genearted after login is used in auth head to verify the user and fetch their profile data. i done proper jwt validating like claims, sub and jwt method checking to prevent unauthorized access to any other’s person data. next step is to add login and register page for this rest APIs