JWT-based auth (or session). Return token + role (student/tutor).
JWT-based auth (or session).
Return token + role (student/tutor).