## Password requirements: - Minimum 1 uppercase character - Minimum 1 lowercase character - Minimum 1 digit - Minimum 1 special character - Minimal length 8 characters ### Auth request return Set-Cookie headers to set server-cookie on client ### AccessToken lifetime is 1 hour ### RefreshToken lifetime is 24 hours ### When AccessToken expires, RefreshToken requests a new one. Old pair becomes revoked and creates new one