From 3f3e23420dccb41e7d51b23fefb6abb21a57da92 Mon Sep 17 00:00:00 2001
From: Cohee <18619528+Cohee1207@users.noreply.github.com>
Date: Sun, 7 Apr 2024 23:08:19 +0300
Subject: [PATCH] Working login flow

---
 public/css/login.css             |  35 +++
 public/img/logo.png              | Bin 0 -> 23237 bytes
 public/login.html                |  71 ++++++
 public/scripts/loader.js         |   7 -
 public/scripts/login.js          | 142 ++++++++++++
 public/scripts/userManagement.js |  18 --
 server.js                        | 131 +++++++----
 src/users.js                     | 383 ++++++++++++++++---------------
 8 files changed, 531 insertions(+), 256 deletions(-)
 create mode 100644 public/css/login.css
 create mode 100644 public/img/logo.png
 create mode 100644 public/scripts/login.js

diff --git a/public/css/login.css b/public/css/login.css
new file mode 100644
index 000000000..d93ae1b85
--- /dev/null
+++ b/public/css/login.css
@@ -0,0 +1,35 @@
+body.login #shadow_popup {
+    opacity: 1;
+    display: flex;
+}
+
+body.login .logo {
+    max-width: 30px;
+}
+
+body.login #logoBlock {
+    align-items: center;
+    margin: 0 auto;
+    gap: 10px;
+}
+
+body.login .userSelect {
+    display: flex;
+    flex-direction: column;
+    color: var(--SmartThemeBodyColor);
+    border: 1px solid var(--SmartThemeBorderColor);
+    border-radius: 5px;
+    padding: 3px 5px;
+    width: min-content;
+    cursor: pointer;
+    margin: 5px 0;
+    transition: background-color 0.15s ease-in-out;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    text-align: center;
+}
+
+body.login .userSelect:hover {
+    background-color: var(--black30a);
+}
diff --git a/public/img/logo.png b/public/img/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..14768e82b32b78bd51e3233742667dc3b369a8b2
GIT binary patch
literal 23237
zcmb@u1yoj1*DZVq5h>}Gd_cNey1P@lyIW8YL>i<!1OZXH6lo~|0qK&G5|CC95V-sJ
z#{b@bd^g6u*D)L-oM)dMYp*reTyqhvsjh&HL5=}I5Vn${tTqH8DZ_u!(ZF|tn2B$J
zf9`lF8hJwyP7nMSDUB6}0)o)m9d!+T4AoRctleEXEN$GaY&im4J;2itBq|Z$VQKAb
z>qBE@YwzeLMt9KCK}X|gBSvSyug0b3A!F;{sQAdsR_BqruJt2lYhfEY32_?H01+^N
ztF4bEO@OP5o3}`S7~S7-MZnkaw>jx({yyU4EJh~<zmUdIO_N5(-OH9nfP;(Onv08v
zMo^f8TY!&GfQyZWhl_`clZ&5|n}?lSK!l4=gj<m2pMU7U+q`V-M6_k)|M@QPKQTH7
zA0H19PELP+e-3|M4tFnmPHtggVNNa{P97e1@C3Vepqr0n0K1zv{l7+#we`04a`f<V
zba$hHN3^tZ_w^B@12g@{5?nq0J*=DeKeq{N7-xW`2PZcN7rdmu587D&`#BF^FPFbB
zx3T85b+L7|b@TBC&vO6!Sq}$yA9rsD_y57r|NilR_X4oBYHI&}$A38&SJ!{P!rMpA
z4=m%K8}eU1?X4T=Vaus)>+SCAWo;|x2c}66uf{_}#>>{y$K6ZU-QDG12c`M1Dbw(9
zbMVkG892JxxchrE|HlVxWi5Sd#puAP@v?LAvGZ{2^6-f8@QZK>vvLWGaB=<PQ8jlP
zN4voPe3YM^M@W~8ON5V4gje9ddlZ<Ajiry}|MFoQYY{tlFIP*jU`JO=ds|KqH+wpo
ze{Z9RjJu1w7kDw49q)gBUr9zr)63n?(FOd#TU$YzMoCUafLmBVfSref`|ots)I^lr
zynQU)tZkKK#puB1a5y^JhzJPs^7GgU3b5M=b8)lt@$+%B3-j|^vJ2P<T3PY)@LKV6
z+5YSEvhLQtunEAQ|Ho~xakmCz{D0Hq7ZkSQu@dBG=d<JEXXg^+6JQszvEgO6vgWn6
zv=p?m<hQi>*Jv7Ej^ILCy8P#;@T_dWh?abU!Zvo6!eAUL9(F-nK1+6CD@#6hJ{}={
zYddQ$I{_{s*zEsWl8B<CH#p<Ke_kXVThD)f<>E;5*LXxMt>H@{MrRFMgDsfBKfdkw
zU+l;K)|>zNd4C66FzElpO8)U0Z+AN%e@ic0DSNPY|4S?6{2xu;+tTlUK6S8Fe0Bmn
zT<pB?xr5EOWf!)#f;Zom+eW~eo6AxV9OXae^q*7bXXh5w1#XEC7%tbptoHw8>i-<u
z+QHJz-WGURPP+f|#r*Ht<$tx9|KbY%zgr9^>{$O{VVwVe<NN!w|8T<KApd>~cy{>9
ze}@$CpMM7>TQ{&zULfQUbrZ5fkWQtNtdwp*?p|AnkIqcmSsQ1vudU4x0;yTw#+gk;
z=wnvX`-X6Whu=jfJhPT0??i-6e~F7s&0JSPCR<w%9N@u3vqS&Qj^Mjv`LRZHyN(xE
zT4_Jkv&=oR!Euj~aNd!yztKe^ort@s`>s-YC9BH!t8N1-OT_NiWrNf6iZmj&f}oM~
z-~)rp-1^ZaS-K<$3oX3M#x8#x&4P<GZoW%8y32ygsPq5spD)MF-&Y3*BTA#ASs+M-
z?*k=7BjRr6VEESecH=|$UFw@z&e9}OEVLBt!EFRPR{dA}cn;2Zc>~p(s~Y`X9LGkp
zM6-~mZ{_h`D{-5|l4LB<CruG0ecE|tN|rqiK~nL3yCb6#k6Wt`#5m9_xk#}{c7B}h
z?05vc<)-2c|NJ2p0~_LcJ<+yoWEhaTzhhNr`a+M1xh$okE%4+vW!(Gj!i2CeJGM+x
zEO}K_Cms9`2Gt!kqq~o7OXYbnHlD<87)?iPIQOJ-gEuX-TXgX<?Zkt9;T>~mbSo#P
zUPk}ecn1o#L#LYrKh&{rX^~Kwp()m+63DrmZB@&Xgq6kfy6v@ty|YH5LXS8%>1Rr5
zI#*<<kazgW1ja`6w{QA9NldAoxDa$vH1>Wgwcpz)tQ|bYCNG_&nyk-ufPOdG5P<}}
z*6Ug^%jmYucpZX;#*695!Wv{^m4pfvI>{?gOdIHPs6IXtcq!^4K%HucD2pq{Momx@
zMMDeEVwjxUn{w%ipPWa9B&U{I&$V|jb)=2l>nl^GD&5y==7Ke=YPm>N_q7Qy_(S97
zWf}1!)NE}N?}y~$5AJyU<`%|Af(8j=^`;hFSZyf@!n@W<<Mnrm{YqKy>&hYOvb{u<
zAbqA?*QPWKQe;T7*7y&6oWywDq3@;jBD;-|X6fTF0#bBH*N*BQ<+zq4A|9lX7H|qt
z5vIhh&tr|i2d?K4>}UFu=$rA`qJrCdzdd$MMJ8{;`MiRVi!Ys>6v`A~U4?Wq4#O_b
z+&Ee0g-5BPg9#3A_Y=Kw3J#{n@%*@samk);U#oZ=R>%9<e8iZK+p}XleVs|ymBs@#
zmO*}x?_s5}tVoRLeOmX$4=OEDY8lU0Z#A-zVj+d9ILdHk`b>h=Ij1gQWf2(`jcuF|
z&hO>(zlfGyg-@ttuhXJ*%}eM9e{peLAN7d7$8+yhO&dC`sPHXrr*N^W=W^PpHJULf
zwlTeLY7DI=k@GjAFo~6q3RP<j^@^uH$bnaQQ;>NJe7+M#9`B#8Q8rXA>7FK|7oX_f
zV->B1LCMN24h&2pF-!2^`S|nCJRWfj@_6Kx)9i)_xk##kp-aVG+JORnSvtOzy9TPS
z=OrN%oZBOt2}u$6Ha46yjxkY+N@^5r2&YPmudcQlE5*d}iBpu69(*@zyZ#6+lKyy9
z)@z(d>b2U<aBDX1x)rdR#?`~(P8r116T+Ddk6C9FBq*XMnKlX+${{QUw?GpwnyGYt
zj-{|X^lbL?K`w`KpP?HC`A4hhBvf!$1rNbH6&fDC%a+533LDG%y(?bzILGy;k><C%
zaJ8a!?msdYAXN|J;SkybH?*?zeQw~^e#>s?rTsH7gXFr+i(fjOItYqC*ITb@lw3qG
zFcLzMFM4ognT#ITQ+3)5a_QID@IR-GdNJQImi)!kR5eIzOnrqmU8oPA{ucAE%J-7I
zsCa`!NvN4WSriyEHrFTbe<-f05kBwMrQCS=^r>L-i6;Zrz^#Wtk3{d?x;5OX!{#}Q
zE6?_<M|ty`wr2S9O>W$U?4{3#kxAv+ceip+a?Or;dVtM|kf=;k9qa}rmYv0esTR=`
zlG6^4#CRpg%3BjCR%`fZ79Z`Op5we~56ICRH#Pk%SL~VC)3@G3cdSZDP8txtr3>{N
zTA{)|V$~@A#Xb|0!^nn5<8(gN-O&wBU5Dp1(i&!M7d=1Czj{79g73VvHGERi9F>VS
zMO_CW3Dt(*MAJ#d;kzrk+y7<%&!35b_-GSG=5#EnhNthz<q{nl_f?1RW$9!-VQ%;&
zJ6D-YFnr6>x`^pIycoN_KB4<rLat3bDg0O-d|>0-Lp*u1*#PM!OUe2!;Vkv~xnPeZ
zq5Da7eJOT?g9vb+(^HkBgR$TPJ?kwh602{dAz@9=5jK+tdkl_T>gj=)fUz8pQrmD-
z^43#a$Zw()-s>CzTcSY(>@Vt_=|e4WfwL`|`oKwnRlRlm0UcwPm6fEb*)!ZgbO9LQ
z5`V0_O`J!-$ivM^lG>rw8iUC0#5yWQ$<5Ii;6c~Nb~%GZL#`clx3G<vQYxw|Obqd&
zD>!2MhltfwbxZm@Z}F2KD4OL5dCX5=m`Hw_M2}@)BnYlY8r~?$`<0f4nZn?vTs%fZ
z9~ek2hyIO`7X%sv=jgD#-H;Izch;PiS-amho0xZO5;YR@#P`!8y4)9XvL4^e@Py}=
zL#V)!^+-w%^1+VycI>P77B30OD6OOMl);*{6-mFC7@sDiu%+UM0-FfN(-clR-S)`~
zIF~0sBrkckLaKsA!c>;>)njkoIMkX!@AfGZgU!O17qO#KPfS>Y-98H1KCH4u8I-Hh
zRK^+&|09&RLAhqAG%zHpUD{<5lctLghNfSkkr=TSRuBSyoUd=qw(~xgLswYYtC~CB
z4-A=X;cM0{=z_jgo4bg92gM2a!oa4MOJ3$5AHU)dD`yGuaUIH6n}r|+JjdQ+;xuQC
zFeTkk94PK&#X|2_9=uJgOg6XmtNo*(i-V)kA0`}%Y_a#0I1kK|eoXChu5i%=cCAWb
zcvQSvw{3UUKKSZua4+9&LqIzDHTaorCshfuXyC6M0+(6bv(TS8g67E|8RLR$LS!h>
zQe`X>wWS`amij;4LJ60V?s@7ZGO*qefAn7X_1Nze36&%XB5LVRYBicHQ4e+MOJe$6
zl$(A$Y<>UrBNr=txLMct-DxE+MneV{sHdG4!3nxiE443Q^h=zc+%s1cplMw%Vl!kS
zDjjjFHY38?zm?US3<3{kH=AIul^*ePqa?=JtT0Cvl!4&l?uV5N3dwoRG({R289Jwm
zHvBD&STq$b5H{DjFqW67LEExbU=ts?X_s|yE|1zRi<i1c(%rI})UzTjZI1?KXXSNH
z*}f=Rqo_VIrXDS*eiO&<>lftfE7Yoo@ci5}dD)?@c{s0{U;3isz@>sWEfx%L=QdmV
zV!DHmaMT|zF%zTaFI3SL#D-@~Z?PeVB3cII-7@s2z{Gv#ECO5~mB`TYqUC-z5(6K^
zLw+;3$Sqc!s}A^tnvAXNOx*8<@@socY%b|4T)P0vWNW^bLVB7z;(Bn;Ks^`!3|X+h
z9Ib7adFP|d%r78p1dTa-rQcwDro6Q4^Ia-$|8cu>GWho8`qWzuMN87>)P_uY=%eGW
zI&o!<2TS7~J`1Os++GS<+6t2Ttgg2%7lVO=qJ1Ac6cvhE<rD#f87;$Ew!YHD&|$nr
znS$o6{DXCAzAh6K%o1h1n)VVqRCi7EC^_8+LRgBuEA(+JCBQHzv^2k9eN7a8L-sc+
zFH`2!8zHJmv8t_;bU9~>b%pDFvIm3>%{m!pRCATC!)c?wD4Lm(K%oreSAz|H6ta}w
zB0^Y9w>zb?P|(pSvZMW=P`t|1yWQY6*Os|mcYe<CSBR&^>=w0%>mO1jAUNZU>Ag;U
z+^oOy`;!%O(fvR;RseKy+xNp=`Qzgc->a&=tCDD{m${AgJges;zlw>lOs}_MPxtu7
zRY-}1X`4WkY}kYX{oMI=vq?J;;=Z@Ny*d#+wCXWSwwVJ!=DXR9-!XRjwS-cLQ3!f}
za<aTXwR^MX;(x}Ue+5CIL#wZAcs~~y$kHuan15r>rhmAHX^8L!K0+9E)I|n@_OPT-
zVP6P>$)yIj>zj9T?Pm9I-0u_Ip+6+}9A`DBtA82*FckUkwk_tTqTu#2ChpdcgRt?2
zoH``)DyiP$bmy1GkCR8{cynxVs1`3j;{`m@--93ntmgy@mzT@weRWDZu1(c5aS7r>
z*Pryb4uqaFuY9M5I>`#u&$`?Ss<ZkVbA>Hx`D%8vO?vU|Zw=zrXl_Ce28U)iup_B&
zCC~{MO<lk2I#^~%Gu?Iou(f_SGq;zA|M?61FIQv&W+x>&RHFyNW~@;FyvYrJ|E|-i
z#pW3r=oZ=?u8RXgPq6HGUcoZsJ4IxO@Ap+p6)D#J&|h}Kl9kO*t_VBVYh|hUt42}z
z$(Ng6zO3|$ML?ZL?d@lyU%f}oc~Or>U)1H~V*?EA0wY@K2`;+AhlxB{qJC8c+AFI@
zjqgZ^#0LC}<=ISdB8vrZh0wl=s))QE3kaMf5aBJF^5g$~74+VS8M|Lu`3bNK_RxLP
zkpX5QFs~2B?=aK|2+EaGX<tu03MY>@R~v0-dB&54Q339LezMG=003h%#WUvL!Kuoq
zQ5U8jW_rDqMx-1Ps#LvJMx=NU4Ov#6-YVyrejB}B@0KX5Zyz07LKcP|`11l&ns+Gn
zX_52*Z-_<T*N}SbgqE*w@COk1u^U<7{stZIOxYv88*|-{iPcDs?pdZ2D45!6{a4}<
z{5Ekg?}NKY40?%Tmbs16S_vWLL}cSoZT)bDNXwPV+psPanmR)sus;jWpEt$Km1V+q
z+}-Fbfh=3?rCAoF{)0`$NwP;bAbC0_`_7!8clO{Ql{xT?wlj;*f<02XsX~H><0;Bu
z3~4o2M*Kc%Jxc%bc4G|Kf9AxkcWsZZI*`t=^Rt8|v<zSGjJNq17&H_Yt}sY`{mKmT
zuUEu=IoP>O9BxG1=1efIRVO5QH+UsHz>*p{ycv#+9K}n^G!{m_O7{mCdD`sa=Ad}>
z8L14eRMLkBYZKeznpXZfto@f4OVnddEx0*4Q>!&jVm2IbRA(AH4~|hq2)M&YALKM7
zwaa8lYD^3xf26alYTwM!rBfzbGywEymNrjS>tJ59;)y%(HkCEg1dD^1=pH0no$QP7
z%AW@z2;XvAh=4HXxhAm<-ryDSP(9D9{vsH4S7~%N2dkj*XCu`nB9sT__V-7FMHZ`X
z`FZ!{6;#jLKKB8LQVZM>B&Q%@F$QKKeeGkOL?J^nc+F|nlmiiUOLoT0)@lT>H?!tg
zcF<c}TfQaho;+-jrQ<_L+zuhPDVLA9soZJFkNKvj?f3j#rF<_bM*giY=4hU)IGi86
z2Z2T)NXJr<BNe0$*fj1Oa!z_&?=||4WFy#(a?%Rrc?+8~X$ZepaoEYey+T>u^&ZYq
zmG<|Q)0$!N4!o$8+}Bl3P~%dH&@Ol6%2Fhp23blPsWCc?tLOw=52ki|ze=U24gE<F
zLWXkB1Frw%5-J17gx1{weS2ujvHxUfb<Q^QAsPCQG%pAY)AjkQuCLIaOyo5TtFd)0
zj#r~9!>f{WE4z1KES>IPFx+tZ^Cz7^2^&^8U%e)QayqsE2(a2uniUySK@@D%eOxRF
zGDJ#IKD|!209%IFV_1r=v6F{$lSkiw-Oxs`dxeQyjrgP*R5D$)qCmEZvhB=zTgi7y
zO#cKZRcSUiP3w@x(uz@rfAmivvezuTWSDUV2NS71OLt#9S@zN0*iwcV%?B!deT3D!
zx_HrwO?McxG>hDn6{E%apW#mxQ^LuRlkuxQh2#!2x7}3xu!nnvx~HFd3)N?yj^q3?
z)5LVDF;M0-!GEbcB;8<AYr-=jPVp>R<2cg9tU&c6vAfLtmpS)Z(YNXL%my!ZPLjQN
z6^J(Uyf@^7KD1JvpJZ2(*=-_I_T;m~%isN*j5bmiX^!zSW^F3crLsIU*NQM4l?9lv
zuGi*K#$t&<TbtF#jUR%MC*$?le~l$};AhpK%#yC>fie+$VOo*S@pR>!&;}9F%(vc+
zx5!UX_`lu9{zL|1lz5$Nu_E)Q@hOS|8BGWRMgq{6jrC>Nt<e=Dxkq8-!)4k(S)&!U
z=?B!AFE)@W8<4hV!Q5G8#-YzY!g>1E68~Nz4i$c$mofHgZ?GkpXPESky2`h6-T|mY
zEG$87=LV<YiT7BU1C1PIAl+YaN~OZd=p_%ug`U&s@|qHGTXLhJaBZ8WH)g6HyrG$;
z0B+I1kpg-(K{X(%%pdFlqp=cKC{y(TgVaYWRUB#IJQ41e@Bsu@P#Q<z+voO`AYG)<
zTTZ@XTWxluQ+^>YS9VyM3;_N+Fk(!epR(L4DQQ9tMc!*$7p<2pbV*an3{_S23vcy2
zFcJV3K`c-tsWOQHmlXbSH+A5GTzS2$;@zBn9a$zb?o3KWBiCmXy3@#{q;ZD^`J$?_
zodLzkkcY5q1CFw-Fl=rdxU@Rm$104eE=y7+i=MD|nL$HVSjU=o1u3dxR^$X>>>{UJ
z2kCZmhGjdO<ryKkO@j>SurI@~LsyCL+uABf2UldG!jz3=9%X0tD!mdif^+wsoc@no
z=4o%-;~FxpxXXHE6gkodK3ejm`b&iY3<D>cuP9}-U%qPjK)SsC;VDax_D=b4m^l(|
zw;YiDnCZ;C&INHq79%&hR-1L~fea0oCLgolxsBDiPoQw)W?#GxOUzOs3>1{aqSi}j
z{4RrU&vM<<i?a1%;W*{61ha^+54NF@!M*u8V(P!>-D~li_#1yCQ4+e7ao6YR;o`EP
zp^oNdt2r1@JO);#U*2y_juUeCi-6Y%j9bL#mo;D**MZ~2rx4m=p$(i9(<Yl!NAGdP
zV8Z-3hz1dBj~^c>iQy(GB3@CUKoAV(rNpSYAn4wtL+gzr-+nZPDAhX~7Z-XBjXH4R
zH*>(@7a&1^d|GM)i=amCw0q{fKut!K&ZbrFd}L*;#`Lp-o2mf+1&E?|4~U4wIQ1*$
zkzz{*@Z;%94$roIT6$Qt7QmFRVieaYek3ZbiV#dX1jDIu9I3Txq?d><MV09#9u39@
zeRns7j=4j_LqWiqNW=v^X88#c$|vq#WN{>Lpzol<+E1%>AjS9@rN8TTcv+BQ&80N*
zsH_;~-dt&*!u-40;I`D9_F*%88=Z$B4)XZh8iArWX~9PT&;26k?JY)p%P?pgKJ{fD
zoZ4sN40$g=xr7EamRILk)y`wjR9$Uf3=VdPFDzbV&8`hf#VD$i<YM;){P}EIA9%pg
zQSk1yja4AiPuXnliSZo9luOt!0DiC1>nazedmW~fWyS3T0=V*2eG;;f9KK}fhb0Jt
zi5lLsuP67O)67fWoA4-cutvA~nY3zY@J5jlcvK0QA7xD<luI0St`Jni7q3{F(85A0
zO4Iw^>xC2|#f7WaN}a<wnhBtT1R29GWOtRWMHe~M14TPRYytx4TT*-N_q+roTTV_i
zhM1Ef9t?)g_05r{m$Vs*6ry~pRa&A+f8JT3l#~sZO_<IL@HMdOgfA(*bdlMPQ$@r9
zlt@iHERy+?vA$6$FJTM+m%swXGdqgeM%gh#5L3`(@4ldo(rlu$fl*4G<JKfcdV@w;
z(Di4rv+s{Z7Efq?kO92p;0zK~=3hAeA~t|5XnEX@vL`3^Ae?-dwezaG*z)-9m-A1D
zhccI~O9oVAR8OMf=XC20o0?BfLRuHLF1u9YNBsQF?>g~`_lP@ZJnvrU`RY<0CF?|6
zFDNXRw|LD^+n1VE5yoJLt^vGqm`sR02L)D{Cb<BBhPoW-J_=G&CvF7?(Bf1tqTn2)
z6t`A3XTJbi#Fvne&z*wYtMT+_0HQ&dzOGVBJ@Rq42FQt97|6w30pLr?^5z|fQnva*
zQZeGQ%!K{q#@hvp-sZcE()`!+a|v-iu24e41uadFRsq}^Xuee4b#FL_6DgEwBT%bN
zjzh_RN?NnH86)LmvL2f$j>4_T<2tf(vU`s)Y+Dg9I#O_5SUEdz6v#Q_i0OT?l%fhI
z_H3#7a{t42&XXU!H<X?01C7A#@#?r%;#E%X(GTDxn%x{YDb^KdYBE|%h~9--rG)bk
zfxG&vKe4u@;x~0t-IHZdP~6{BCM4)}Sva7LrBSHU-GRQ$PfYaN>hzN)8s`iS=6~J#
zMYZP20D;9S=o=(QxVySBID!nwl{-r_+pR{n*c~O5=B22XNpN!b+mKQK4NDY+5?=Du
zzIrTTx&`)AvagYWSm2dCO9i;7O8n?njD#eEy0dp<o~GV?!CF!HAshJCSSxPGw)d~Q
zAR|dq9oI7a-3=y%MDr*OcrU=pc7ds~e;v;4!H*Y*&?olcj4!xfGaIk6DYlK%&IY7z
zh1+M~id8!v50MADCdUe9DTgn2Y{_~aDNS<f-zh|b0Ckvs-pBXG2!TZSusAgwt>Z@c
z^iP@gZn`T-gEQii)(1g+=n$&VLxv{x0q0r;60s3`Q7BZ7fI!jy(_=)mu9seX;q(-7
zoqFJ`%hHfp;?8Q`HWOQL^g#dwk;M0fK(^DY+W^=<wh8!6D~#NcW;G4pCEZrwV9M}m
zm9V7Z!~=gh6~7RlCt(Yq!u9Voa&neeC;;K7d1M8GItgR1m}88>MHV@K|Exxv{V<<=
zXRtOonc9O$3C`5O1ka@VT)_dfS#kZr{KT5>1Bjf}fwu+)FFaM{GN+{Pa0wGF3-GNc
z2O6~Q6^$|d{!Y3$MFc;ME)-)s_51fGz`r-$wrm^^wwlRZa3Bvr4Usz;b13-%!|Me^
zc1mBsS7gd*43NP@`+ocG5Yl0CCWsCF1oY)7@a05VeY%8tm0HS5fExXpaD3dT(rpQm
zO|u&ZJ-X=mzU2^dqmhu7S^@m1YiN_%9Z1udJpLmXm$TjbY|&VAIwY>vkc_5614iAl
z6kd7Q#LoloKy_6V0%>WFJNz~!PgQf99r&(gn&R(9ud-GBi=#NqZdzyZmS;kO5>C$w
z%*~C?S*v{e)c}f@Lxes2R1SwsdT#fk`_*QyF5Fq~?ZV0#2=2^!>}A)MSNvG6+l#8t
z*VKQ-a+~G8c-}tBBu_K17N~CkzI&HN$YuVO$0itn)9M*b$v2RgaP_T;TZ^_6l!(dT
zzI2t5;ox@7jQ`C15;Zeh!0Vxp8w;xp(R34FW9>nL9rAIpF3XXV<x##EYvPU`V|iti
zY+<j>MfwAY4)%#Ep`1e+R+w(|q?E8{&Wk&0=`Ifb(E2Aw&)S;8>GvIwY-NFwBwl5*
z9GsqK&!JK(sz5HJ_ZTs~)tSyiAKraN8>Q9W@^#Ju9Q=Zo*)_f2c4)mJGNc=yC=)x-
z5C{OWT(#Nqlfkuf*E%UYtHQu%G;SW0#=clPK6&X5gw0|bK09n!Cuwj5Ej9c+kS@Bu
zo0Lxma<0?Bwws=liwcnEjG+)?*3FpMzcWxVlD8BHjo`uj%gjo-4AH*4#R+!(=GB-J
zyM+d|Cy@%I&!tj4Hb3t0)0v%-0F^)cX;N!zB6089S&<LmU^2Y#d;PYGmhTw1;>oj{
zl8>|4=cRw>Y7mY(7hSprn0|ZkGvv9wQozJwLZJ~}Xf>L4FZswH<9-ncnSaDU4Du6j
z=gTN6^>Jy^m7I{ExFaFbHP7|f&GAW!9<gn@97SXgkqA_inIBtp_2Qz6Os}P8p_Du9
zuNoKzKv10!{rH?~&=aI_H%%sVS<lq6lZYmNZ8u|`GS$D>{&MZJe#oc;2;CckjP9d5
zEg+Hp+|r}iO$JDJ_#)#5`BU7YR(cZUWkQg0?}t`QPocWM(mpqA<RJR^)hgVp^)Kfb
ziF0T)g`*k^Z88Mmg}slS_iLJ#!^dPx<?USEbff@jh^)4?-3qv&6dTzw-bOK*#krQ~
z-wGaJV3;Kby%D<yUJ^R1i*3}Ti=F?-{`NLwQOk!fYifuU_#!cto!Em^K!do~>g=hk
zj_2_-dokhFpc3;pFARl|f3Qs;xEz+EURe{OV%p+J0?<uJYq#*jTbQybdrXTuXkK2o
zD;FE{2Ha{kEB{thIAKkS8?pgRI{m=N5SmQvxcU3cpMWrA25}n&&R+%k*3z+|FIGHK
zPL2y%7Nc2$A1HB*eT8y=av{m$4$pD@k{7EIMzMz&{nI#4gq{ZgXK0*~Y#F7BD5S$b
zUx2L)RN4|oK7P!owRi(IgQa-ME~rq1@;WD5_FKZMHsIAk25ly;<5{O`*!A@`R8!pg
zr<#Qh&pbx)5MQlF*X2#`hKFvUou|es79<HODe>zYzJZFzTfu@3fWv4vPZGvncs}mn
zBeUJ;%x}mwb&FUzjVnd6v?faxF^`iotk&}9`mxD{{b<1rD1VN)-TWzvj;79#FCHol
zG*JAu?IlFnY>0sjb>hcAA^U<nFzQ1{*h)C*P=(ewFI9`ms?z)w@$Sy%iTE-ecVGUU
zAjGj6B*ghks2PKJkc`HCF<I2I6Ck}7XZI!1OgS2zIhUB;c^Kpl3wGvJ-oG}7xb%v`
z05%0Rm*qH3^}^{9u4UBFT*ARON1m^a+hG^fUP8tLyC6yS{oy)b{1L<{<!}gPs5<pv
zwy))*d_o9r#WO`F1ACcYp!gR!N17;+@TFl70H;6L2G!O8nEN>LUD$VelACBg#6U?)
zGj^ZfyTOJuwY9$~UXQp4EN7e#W;F|vSDJ_V<sQicP%y+K6?b$G6Iv<0pZ^^smO*75
z*DEUi`f{W>f(Kp_O4p|e<{q7V+*-9v#P!IMa!pNuupEs%IhKtNvFX3@&d)eg$Cdr5
zlUKzm>b}(IzZAIDIgoPS{xkN6;?~@U<TxF%vl4%6d9uSlOrW4tG7n+O(}zFrEe#Vt
zKc|KMke7G@{45DL!W$0T>f!13!UjSX0oSlmu|p_$zw34iXMt>k8peJdO5rBPz$XQb
zSJgBY%MHwnLsJE}UlWTkviOBcL=N0cO5cJ)2|DjUhX-4u_IU}*LtN&YUnF`r?*eWZ
zjV+bzHQBwzJCw+tbF-}#(jZ{Fy^)IYR*hLB@!yl?N8*h%B*S__4drK*V;3Mh!c-^K
z-a)_4q2o%5up^kWU)50<;Ogg8J3y=nJOdGopp=cy2<)@@Y$N9M&FMQs1UFeTD;1|O
zfInW3Z8yZWpA>BWV$%e)L_6!32BSN~gM4gc)aG|Z6MQSHD_S2c?t)sw3@CN2McU9E
zJ<gOuNSv*N8`5yUcA+DP?lARU>w62H2=Tt)#Pgpy2vtR3?EdhZOBeFG#g;lzn5$j~
z*CW=(hv8eAfBns}zPVh4@(F64YGX%@Gs$HBgMMqn&y@BufV_DJ%5|=oEvHH^*HQEU
zolMkKWps;p(2<RdVgX$=1yxs;E+pyV1PsBvpi2Q2o_-bnA!qfh=A~2cpVe1}A1D(r
zXd6A^jsnO=7=1ulsZ5Jsyj|<lFW5;y-|5aHOk1@5>$pkVRikaeSrX8&J$TS7f<;Q)
zx|=7Rw`kU;Y)F#xwy*y&NS-?+@dif4e$$*HxUK5I3rtdviB1Q?9tr72-NLlR_%R<>
z_%*mMAeh97s?O)>6loke4MDUt;QRpDe#GP&OWvt-K)9|-Yq#8R2SZt9gB&M(6~op(
zvqN_ty)iT**;XO&{Go9FC33!(wJwg6*kv<Bteg(q5T{gW>hIZ{p7p;qMi$p_@=oai
zx~+zmZ!NzMQRK;jMeb#65*p7u8KEDrgK26X0}^_<W$jMecP$3hkpTEv$PU$|5L4nj
z(~9!G7ZH);1n#>_Tz`Rdb7-Dp`NfZS&PU(8tl9i>in~AOkdO}ydB>K>ghh-u26#4$
z;Tz?B$WLN31;B0^B``#@Y*%#S$b?uVpRnd7F4M%mH&wFB&liYEG~`Ig;@(W{PxDK1
z`%A9OZB>tsbrTTL)d9)ppPF&w;wTh{NOh`A`U$uIz?SJ#tR3+PSU>)-mEp#nWdU?D
zA#h2Q_M+RE>CBjIG+n-!)s71vD&2YNQWYiZ(6m1k0q8y@{=i&f9KG}8Rs3PQlYSS^
zK$}_{bmZr(tj!crU8-y0VPX74kZ)+f4L2&@Jg5PpK`Uds3m}`?(yTT$H)=ivS+M<|
zN}|Nly1IT=z|j1#{OK}+eG9UP>1ER4GMuvF>9P%9Z6vw8bgWwQA|3=hrwRa_ecF67
zIxiszc=$JT_(qEkjc@3bn81F&#`^%=OaDNK;P0!^0zj%teL~M)Hv!bv^39S#yB8^=
zyGMBx3iSKxnyO=Y`D`_kx}AR2P<jmN9GWoyv$)#r&xhs2cL35r&M5xFjE+CHGj+B@
z;+*;+N*tyie73vqO8haXz04bF7hDQ>S6=bi1TPw*L0{@W+3HC9BM7ju+Q@I*Lb$q!
z)EU%@MHCGR7{H(%P;xx8MoU?5L7Mk)x}(2Y&BztkMytdz-G{TCuMhbHpX+|#=hEXB
z#{uNM0h}P-`JsXfYK%Bh2mQq}@5-)&K^d>j&gW+kdPe^4)b7G4$WKo$ua;M>@6#Qr
zWN<Wc8aMqgwyP)mY{$!HEMR>qC@1W(B02x#s6&H36$A(gK=FW8`RV9P+#gD3zpOR9
zVmSXfp>b35`0~`Q_EN1M;PFP{lso16^B}r0KwN2iU&|)0`T%nhnCg;D+WV{yK;I+s
zpBuF<fN4f*d@4yxVvp@OvjC(V#(=s}@|5MdBL|pTcE*Voj>v8f?SkCZ7tG(kDw-|z
zmvg4d7vC*RNXb3T9JVXpIqWfi{A=odI=k^Hd-O&BYh3>)*T&Eb{=HP&y7f<l;Uf36
z1)iKfTrXj+6$X{*3S13@&dWD_{et`N4D;n2bM=^JfC8xkXpTBxy)2@@gkar`EOV_*
z8IfY{-hO-f#mUbcPJ$o9Y|I%PrcTT4k1w6I6T`JgBGJ$uYAtB1Z|S;#%3TNwI`Ugs
zj6kfzrhjX^S5T*9>^n@Tt28|~il{r?9L|uukaPhQ`ls?gZww1di<M0a);~2*{-TYJ
z>bTf>`wKtusTQ+TydCb#IT6fm)yK8o?9cA|&o_d?ZuamxL-Q%X)$X6uD+1(SiUPvF
z?nSGg32;asyX{V-g!_~~ZX}L^yPoaGuD#A7gG(zMGg}}Uh`(Xk^;sIt_rtQHD5`B-
zuZ@^;6AS5AOrE^da3zJk1gFAs8^S?gTnrR43^}!>h81t%(!oT)fTQ5}Wlno(_mc<q
zrdS%LGhaXW?iP6P;e`)i6e-*(HFQzh85PGt2CA8Z4JQ(F%^B?8(((#6Ysa0qmZhoH
zLu;A>MaGwJx>s>OHFWC}CenwfsGl)ut=2h=koc7u?^tpP;{@(bhfNlskPjE$I(i5M
zcDY_64|?D2_{AN)Z}#&F*Yn#0TuG>x$V6X284)~7+jv!-{cS|q%IDTV!B<qy13f(?
znhWa7M|~EPFjp~nBC@`b4dA~80AO_-@ywDu^_TZ(WgH{4OXVh2HA@Xu%WJtabGu0s
zGnibvU1)Xe&KjIkoy3;QY2M%zcUowotDexDKPsvx17$tccLPC@n%}b9w^v)dD>V?r
zQ7(h`fYIelT3bwF?sP?N>+BWk@22$?<vzF4*j?<qCq3Ziu~J^GSfkL7=yefz0NBW4
zGoN>Ew0rk0?&8P$@a{Z#<~7#Sb9J1VvQTrMqRuL=e|R7S9MtiRvhC<}rLpJWPvOCz
zH3e9?-Bbv2IVS1oRoUrA75YeA1d_w`^})?`8BbjJfaSW-Z!Tk?bNuu(Md-EQJsI5A
zZ=B6m0y+1p+b?#kz2YLYNM1*CbNvC2$j=i9p?f-Pm6qA1;0~YeEtrdkT(`0@w{z_v
z(Q@}S0}&zpgn6p<RdADs0;R2F@llcd?x-&;YMMerF5&9d>f08qT|T(0l<A~a@3%L9
z?@7mv@so~@g9#0Zz2nO(F@tKey%Yyg2>K2DfCN(K)^OUZw%4y~1#m&-*-TWhXzEEY
zP&sByRMX-KKHVe-Ov2@ad5a8FI61c2p&H8N-et?=46Jnm7swdE2<Y8%;TCBax+x#|
z&2^IF6>zj}^>b_+fim%PF72ZLLB4aDtLsSi$lX@eGY0NUjQYv%)sCyvcO9-b@Ep33
zS;PQ8Nj13rRremwjGioABa|{EPSw^fmeS9x@cki<blHQd;7HAc^^InvP&8YaXWs!u
zHGCG#&l1bX_~w(W6|b_ffXj~mgt-JC*B52sJa<ru@Exdc0ApOG_Mf!4I$oR~cHh16
zo%<o0S*dj04bKYf&gC@Vef=TaGcc>I(E^E>6I*4>7Po8iOLKi8)iy`qpB#mAUuTbv
zp=k<<a+~7SJ$QBuM=;>AWhkAxqHsWN57R*9{eM+Ie}n9V&URU{SGe8Ac!`QTQfFQx
zjvXgCP(m%k$9Z~r^+5d3VRwjei=S)wxO^5P<7V&=<_v!2<{e}HoZ+`5%mL2=W#9Ui
z1&Qt1B`8#rR7Mfp{hqirn$apm07-(hyr_xDdDVE(P&uvGQfwF;aEHqFy^G7f{u`5l
zqbbO#%1Ah4?d!=_!SeyKO8hTb4V;ylPbw;EJsLX9)5CVflYgN0oH5%WuYm|+ivPBn
z60vPbb+f}e`c><x7RRyPha^Dsi41N}0wt#T<M(yP`Rk)riS_Mu$5fL|KfH3;a*qQz
zhKRHU0huffxW)0(0M#6^C?I+Tc@;-Z3D<^C_}`tIL)+c45=z}e1vqR=`x_5Ip8aUk
z$hfbvdhlMBec_{SG@;89PG;AbB0$hp0Z%Xrz#_A;$azBEE{I9Mrp^_QXMh2^!$dOy
z4`a(}xNd}}P`8gR3!q-Br{WS~j6UJsx~S`V;d#zx{cY*7*#RpEL{5$_%6EZZZFYWq
zo1eUzn`(3k*CH>^avmu(L-PYM=QTkPLfaTGdNMsV9j9C3n!doz?%u7ElEW1h&aUeG
zN6OQl_tB+~bXa`-E=de-g{!&vwq(gV--DnmMM*itaT@@JCb0vkAOd^=fx2TBkN{QI
z3v+p%s1AOc3=}Zo`aoa1Zj3Z>sIgoX%)y<}9iK*}^BhoMcRvZ<D&r)NSL2E22gSt5
zU;;x@v}RG)WcjyKzD4ifmw@;~4X|}TlEvcpl@;p_6`htxRaOAFw%0gkR9Ij5iWs%M
z+WrAb2M&5%v#2R_QR{OhH8{{T+1gPVaN-IeF24g94*RZmrn<M0vU0|eu~UBQqhEKL
zOIHBv3x64%HUF6@wM;aB=!dSMQ|+t8^YgOa%xSOQvI$=((pP!1F%Jf4pg8jmAn*<u
zM*QV)$Gb8IIqqJ9e#F*bGU6cbsEZerOr{<bFeFcZ-tF6IN;6RlrjaIJ967V}{zwC4
z@XuYGvtf2$dau=>E8cY4Gub2v5SO1s@&+C~JAyU0?Ml@uEdQ{V=CZF!LNO;FV%T)j
zALZ=51((cNdpdMn9IH4yyiP-KN>$2{SvUBs1-w_>-AuEotF%k*wNPCZAGuiT>U^Uh
z;Cc*7<>BNB#eq&ONKw1ih83=SoE8=3(Zrv^Tzn%5(Vi%%tr#`+DcZOBg9;epn2m^N
z0Fh-?HVzV$>pazt2QC5!)gblD8VOg8+!_|_3Ktt<UjNCI_6(b!pgZSt&xbchM+cOE
zOV_xG0M$qDEI(H6p&aq+2mXtC{kXCeQDqW*|0Mk;&mwaP*WiW1wFo($Ogr?Vy}XwF
zH#!dyNbmdI;5(*v6$s~k@N#EcLvyJ@m#N_;|9(c@`O3g?xk1U1*A8=6wRSccl#kfU
zhvY#0Rs;E)*kJF|7s>UDiv_L#JJt?C(hZSl)4~e^e5qq=>I!|P2R=1ByH*+v2=mQ4
zRyk03zW{~%5HX-Z6ko)XU=RYC#3n9dLjrsGrAp|4`*;4QowO_4v~f5%(wFZ#up1?=
zxd~IheQg2Rs`GTv9Jq+p>|@`BUrfJ6g$xxK@oPXe4&+#4=#XY?K6RSiJ@hG9(jMU@
zqA~qU8av&A&!`GXF2n(X3e;zs7q%XB+PkPrXFbD4moNt$p+S6nGfA(N%QKmW#g5?p
z_kjZ6vXni5VH>Cf!39t((g3&;zJg?7q?JT8$x6vqMzxLv!CIS(=8fDW?Q98Wzpjn}
zL0`;6MPOz?fnH&aj(m;`ywdiFC@XdgN(f|8*KXj*_oxfV|Hj$x*Lap41SuYuNoU{&
z+_A+!4Q~b1kZ|5QfWB|G%X5MebLFxDNCv>S+-GG}(JPAD_@LKS_<E`H`wGpUd~C8h
z_j$hisPqH{L5EVm56rKW9eEKOMPt9uU|6hppr_s?m1+9`D1QmB0vXQ9L3X13J)Y*J
zY6QQ!@3Q1;z>t2fO~#*G@#c0wgV3G$WPk%faGl@KF2`~{S@PP9>uL`^-(qdQT<qT*
zL{nhty(`MK8&L;DZ?N~h<bV04KUUjm39hv6fOH@ws~%9Y_I&}ZlYHE@h?2bZZ!9z1
zR<%ik%mivo_9#G%tl)(5l;_1hpCm6N39`Xe+JU<ubO$@mn*gbQ{Q@gVp2W@C=wi^p
zpXxu0%U8BfjOPAuK0Y5Z*KibcK4A^ne|mf6Oqqff1#}!#BXyn_WiO_CfQtW()zqw^
zwh05Cs&FFS7KR~{4q%p#6xa0xP#_a-(j{PIH<+oIz;7=?Uxu%L`|TWLXJ@ycmT*3H
z)H~h^I%u20fh+`aDw!TT<422jR~qx9t8vPrTZw|MjXrnB`Z*H}h*h&suB7ls0$l(p
z@oC)I0aKZd0RhHdgKTjK+BXcwtJ*;U&q)X{5{fH&0zhA#2(lgaiTb<~TY&sKAPCW=
zrT}<^W){*vs4urU0qZI*q!SLJ9zV#NRCQnW*hCILy+8)cw*D<-HM+n|xD-N5a!R<4
zMnaM!4_Ybu`&a+?6K4ae^&xN->~z2GW2{#ipQJTeGHxEr6B_{Op93gjw34Qgf?~%W
z(9aDldF?-q;K2r&{xFT`>-Ofh*WY_V$=jf(MoAS=)uY7?6k|?AvCsOg2I2ufT?rI+
zI-TZhj;HPYuYgvN9B6dlGJ?n<$<QY7TO_<L)9YALl>)nDhH;OCz_xN|j3&d1V5hho
zT}(qJUJ%xAL`V5F-jFD%@I8`HZn0z#Q*M3P9Se`%meRN`9L=yy!0HVMAl}YW^Kaku
z1kQGT-E$&V`uxMbVCIrMgEO#1nR6ZAkjZ`p#x|7h?`uIIU6?c8L=#W`Q#>wU@q0|m
zFaQ;|O<7=cM><+<(6L5y1OnzwsjbcLPe@$K&X?HrX&BU&{H5a2e7BzgS>ZBMxs)&t
zpgIkC1e)-0*O);a7MB8%(DgbjR(?%f@+Zrj=<Q4_i<h}b4=#o$;8fQ@+nS3s0Z!!l
zy56FSUX5T84`O-b`gObfWF%2jU9sq+ECYG~vckYLT}M8VGoBinum~QMzZvtyzFAwl
zjFq=6tQ30LK<~adI6B?uB9Ied>~p`^teS9fL>SZ`=tq6_ZAnv4ZoGjEnv5x4UTc(7
z5LB&iB$VRufS`^yY+SuSk+iPSGR4Y5_cM^PaVtNVxIwJ+siI)oqG@Xn+i$q|`%5Yt
z_t+sgtEo#&o67w`cAe2%i%!n~b_?6d7&I-EG%y%+Ni*Y4I#xUkcwblNu-b#FEz;y7
z-E23UeGvAEc{+I|%=sI4#gredKpM+k=aKM<iV|4Nj2-2waD066{`BDNav6YSppYnd
za#0@nxRM%L*_nEaGT=9`oF^JMKI$8%%T&he4s^sfbqaL+&IHlt(3eoJds&J$CdGiu
z`IF)d#00#wewOR7FwxRW=DstzfS;>bnr~$)VEW15yR2h5H!4od>VCGXA9fK4!G<j6
z>TKt-%fxWD&n_>uuOH`pXN(SPBOrcWdsE;ZY>f<2skDnP8t1foCSP2FWcN>MKkqLp
zIH`AcUv9rT0B{;Jv~A$Q7wEOyjxww-dmFby5PfU>VM-2=xkn`;B$5N78W^a-8yPm1
zp-{vJlk<KBs6FlCBS6PU2>efoW)n{Pqu;+#V8=hFy8gxzDAoeB*wUwpO+dSi1hj6`
zM#<a-2wIK@OUdL#I5wkZ;y-uIhs0hvd`9`50;;|fmi6arrcXke9tqVYvFSfwy}k4q
z4}Ecp|78PqeZ0vjlhHKL|1kidxB$3FgERp&dP=rb(y62&=Tznjlu%y~UmpMfrI=$+
z`YS8~znDeTy}i8Qj#WKC8jn|im_AmSoI5!qlF+BB#TWB@cHaaU?C0Td5oO!WMYVDc
z&8=O4WVZq5(;M>{?hsIZ5G-<E%#dj!)ScLt^d4oZ>*M2nL)HC<1iPPPi!_yLdk*h!
z`L`8taKZqtzwTYn>pTDg*cJ@W662YZLOj8#<~{(dQJt%UVg=8EB3#JgJ!fZ3dCiOh
z3wqjSmpL2Wlozcx{A~%-*LW22`@3EOuZR%S!o@mVW2K;aq*%U@=4(Uexeu=ZR=+fu
zgcHBSEcrgF?JI-@SXLrX^4RLxH|Fs2+Svo0J1`<qGep>9cRbo*HtO>PG<*qY<|&j6
zcEI?%LdtpUGN6K-0@U`ji5gC>xAYtk6~j$oFQR+wG@mMJtJ~*~3#^Om?M@Fg2>?(0
z^)}0U_s~V`4Av1ixyBdn%R+)xRMmje)`ewImc~LUIxyKT{)t#hyE`5S`XagXf#2Mb
z-Yd&o>{qG_T_6C-X)4o?$P5j5MLwi}3W@gJS4C%PaF-L@n5H|A%d!4U^G)EJHV3PZ
zr4884gNXtzLNqfUY+@9ZAKm=+&E*H~L9$Q@!#Ek}L|YXGuLHUGiTnX$UlK1RRX0ot
z3+RBL-`A2&Kb_;N9biW<6_2l^@~TeufWVXI*95#uy$q5-Pz$Y~gsPZa6*yMUE~~Qv
zDJrSZ&+EwhBr47Xh#@>=iUVP7kU88S<}0eh*7R!0?s5kxlg*VabwK3>qIqSQLI!rA
zPym<7rQx9lHE8Ui*XfP~%1gk(4uMuhx|H;14G*gosyn`bJ_WCl&4{qq(n<if9BVo#
zIP!fcN`K6(W30m_4~*LWZMWrxp;Gh=+|m|czU&%!2ufME-|BvsE48xB<b*mGOsblF
zw#P$|A;6BXUf%eal~a<_u>zW4=V+~;dhwn6vc@`TB5+0gGt~vjDu@)I)C@4e=^p{j
zV7UFJ2KR6xAxZp~tr?b+xq_*{(?@pOc~AW`J%TwOn5k_9jK9qc{_7~&?;wi<eAd|m
zOw2^kzZ7REAH$dmH}SY<vK<Wmdj1NOWGCYi(({-&p8T-V8gl~z#uois;X!j)kKPa|
zL68>@9>-t0ur2FJhwrXFFVwmD@uS9x`y#T8BQs&Dy1YN)<}ReEsqeQi>eO>^W-bOC
zALhb4_mD9cfo{P6*^t5d#3fv;{RphH(eEo3^Sm3L5b1=&w>zPkFOEPpRunjze7!Cj
zn>tz|xJPpEEnlydvirJCI8U#Y2e7q9(14T$8s_@mNUlg?pK%IdK!tqdCCb&N#!16E
z8^}P(hU#0>Ugu>AOL7LTDl6%-K|jI)C<fg`Wafd&r;000X!gCL%9HEMv$l(qf{;3}
z7FMXU?QH1*zZ^3&vnK>jWAie(y5xEZP!mn+e4I&Ng7=q##(3I3?kTZVod+LIuo_q#
zcHCSV&x!V<5D)RDJN&$nBkL}k5bFTYI&|C*)biMJSQ3Y>6amx+8mskh9%}kHhHNc!
z7b-@spk!>`gCkoFBq<NUwIP@k{FRQ94OCTtDc1nGap2usQdG8Z*~RX;`<}3LcXDkl
zH-xLl1k@#hv;wYxe-1g_84bC<1Hsk0loAA*-Frq>P~Sf=168NHNEY5ZyX90arEC&+
z!l1LTTX{4oXPG^JJN};1S48CQD>2LBLl*Bw{X<RZhv(BlY04BQvJHUSltym4sTA&F
zZ!HAUtnU|oK{vwbxxF9&9y8AUdW@Oi?i9Tp0wq|F5A^kg<h&3BU|2*f?u^2KtW`Tm
z!GMjvVqfSa8r=T8fSX8C++d4t<paRYs8w9fAP{Bmazw5L`sKMQvuSA;)(URjg=-?P
zGKFn7Nht~S$r=6QF$b4<#wIN`7`eR-lS(C<`2ctyDF}C?M;)lYdi5MErHaG^AqdpL
zT|U=UG4W2mvA}&6#lZQ}1Qa$jBk~c8Z)ePBLD7RwKaz5!RREYa&QnFQ(TuqGD^5vP
zXxeYgL6m6<WeF&xGSu1d=34nE(FV8wkbxRPT4(D5F0P_F=tI~eoQTaC0bt6je(r}E
zVXSRq;!xHPm&s?+pLF(tHs!H&g(ni@85<~tK))PNL3b(Wll+5Iphjipnc67m-j2F+
z4uRgkd7wQE>LCQz2&S<nn?RoM9^3^&YZJhJgpYH8jwz4}2pK$Gmv+|BSSAWzRe-+q
ztsM^oM%X;ob;1X<Lgd*?Hm=iUt=9oW3ehk;p9R{H7hjJ2QZpo;U1a_C`Jn!CO$|no
zgD|rpgX<dlyB+Ajy{|5q#Yz5Ay@`z}`m+uAx;9sbPYgC!v;;r|dQ0+#Ua$fKjhaY=
zal>bmcK_8o(|kg%0a#9v0#NVP(?~;(?9BI^L9CXbpEu~~WuMvtoL%3KR76(Y4}%$%
z)ASm32cf$Fy~E@~=%(5@IJxA>Cn6xNT>{omKIXJoh+m5UbwF_iCSlBym;~H$xWN${
z-wq)RC;+l=!(zQ4ACrp4F?8o~rUufg{NsRYl~0ByuuMh;PepvGWU^2^N~dK(+F!ca
zYtBOG4!R!(_LdP?p9E5o;ssbg_Zs%Z*vgqi|H#NBO*-LQ%iI;jUmxdvPZAkEh56VR
zzZfEVegdEh5$o)F3;OMPBZuvl3UmOIM3m|WTEA|r+pP~lZ&TR;P-K$G;1-86rn`c4
zo1uI!`-!F{TB#jPGI=TzM?F=$!X@zMm(8DlYsyqT^K!6QiHFGzr>q$7DIRrcqb|-u
z6V*~TpXO3kxJP{L{qqS>SR2$JBsthfG5QqMw6G|^)b#<M1(uw|J2VzRVTM%Xq>^S^
zM93dWve$WW31=N01Yjx&zv?kuPP1&&LbxXnk++h<aX^=csLYUE2F-|RDp^52nj+7%
zd-XWd71TCLVd<(25JnRIqT~4Z2x!7YZU@Phfrg(MEzLujPohNb)@3_&9)oMmU$rz}
z{CQAvU0FI!zmfUWrduKT9@F0J$($nSjy4Cvz$H5|B}5Xa%9)jj-!18=NcI@xTR)^B
z3P^#t0-qS{@TYBqTw1klc-n+l1fz40*8x=OBY-UJDla0!-R>>YNU6)v2l4F`OOe=*
zaI8h?tfr`(jt6YDPBrLgEdYHL*P3qJ_GK#vaQ|Y9gH=%q+!7s$2$`RsSW9Ag7Q+hD
z9l)~qY?>26jYHVjys9_$#zv2(<{g?TO&RV3$|%g#2_-j8r$a(sLp7O;I!WTeq5(*|
z<Ru$cJtd?$^GbFNMBpIMu}1_HRH4O&Af9VJ+MC}3(DH^q#iFRxMaOGC56ABj`!1gw
zBdkfg9eSd?kdy#(I*pli1vq)k`N!MG#~p9TDK6dE?>>DtuyP?*NBkoT?GlT1-^X)|
z&*r7<`SYB;SCk4vJ9w`wmAMkrQn5haPy*=BD}L9~f-->i=+`q-OI=ymhk<gm%8w*P
zb|6aE*J%H|Wk?6>EZF6kOgTQvO}s}hAs1D)NV)fEUyE@LTp@g#bSUM)8mM0aJ;2wm
zpfp>fzaWvEF=K!izmz!sG!dc4{i{z=1vDZEK%H*}s3Y=cN&%HvWIKU}3}%Q!qBgY6
z5~oZXX2|FWK|n-o5p!p7CoKh)k9@g8<wJC+M%gY%=Z!`m#|j}H_gVzxnI?B0(%e^;
zdWFA23ULqtGc^H}rQ|Jc%VuTGVmyXubVho<ntr}1M6y%h^X5>tRPEf`8z?g=JlaLc
znOs<m_u#H+aURh>FHE@mU%%cU+bnWy-qacgRVdn$c*PR9>v=89<1?kgw|Fgb=sWyt
z85m?j?ZO^E_udJVB34dR?vadt;0LROmzsC0L>eha2Z?@0_aIL;)idu%e~j0He|N(n
ztR$vP@EuH0&bQ2-;zPU;^o9eL*0+vVvg{l|BD1KNRd7jB`LGdDYXx#tG^iuJ$X$3f
z*+`LHi-hGFTIOdTU*J-h&n&UpLEjpnsSPI4IKqY<XN*?`6+n(Iq37hGJ9`)__=-@~
zT2!1wFxLLoUp*b(5;ithpxalmkSFSWa-elj!jv3`HT_oJ+lgK!CYZ|wL7OPZ+iAXe
zNM8GIcju1BY|b~lJJ&w|2Vq-Sl)@Ffn*Fv8go6<|EyWU8HuruRg|E}blp6HIO1z%%
z-MrX>nT6ok0fbNptA@~h)Kx_4zld!uq-yO`)%#XmOJ6dO7^!`N5aR>-8!8`-gzRG#
zlo;`EQD(z6)ms)4Lna$$&!q;;G~oVsSl~y8>gf%drP=-WRfRo3GlZSJX`P4}kZ2D1
zVrO`F1}aE(CCy7p>Q{qb5%7Xsoe-Ttj}M74BBj;$t#F_=t(;{2lO|ASX7nXPXD)v?
zM<w~jKM6UfM{?4O+RHkd%}|iuYUYVHE2#J`32B+Ml9x!AM16sou>AD^Jo}d}fTrS0
zOZ#t~T=_rLYa1R+)7XlMOo^hwh%!W$#y*xonx?UwQxef4yR6AO)*@oYXzXQ6Bw4F*
zieyQ$WQ!KXAzB=ilhirYdq2JX1@BMu`Is@E?>x_QKlgoK_jO%v8MT2KrLrG+B=4`f
zpZ-d6eeAo${qW%x=H7WOQB|ZY(_QSK_{G?<*9Tui!G0il@wFMi$)7-N5CnBXr6iWI
zjg=yV^8G}}kHwS{U^zD{@4u{v&akn|W(kwaJ9L057Wb}_oaP-|kfp%_hKu7s8b@?k
zXIseI7(`3yVyVU{LXwI$4t*&!ix}U8&66dkKYbM!G{kPj&Gni1G&Z+z$2QSHk6<{e
zNrwUCBanW}3@I8Sb`eiXtzF_xeG1?_0k+Y{<3UeLB6-wY&NL(_PL?1=Y=2^C?%Ti>
z&#^mRzH`r+&y-~m?FXkg<iFl0lH6cPJvklwDWN_xv*9!-x?VKMAZ=Zi#wNS3!Dc)o
zdR#gMxb6MPE4Xs8v%PwIb!3O%>ciDBo$I3Bp69^am{!fOKS7WIClnu<0N5`^_1SOu
zNuV7@a>O$R0NEPtARC*LXwQO*fqA4V<8wINKe8ivlEugz2FC#;s$nl1-Za*sR@pk4
zSEF9+G>8dJvEN@#%K%uf?zD%a;cM6IyO4vt4V;$-EDe9n+458Cr>lU5TU`&;`EOO3
zcEteb0`da2mY-&tHUF4sU7?X1a8I-*<fp@=Ht)c&Z-P7|(=FzQ$-^{47b0UJ1{J5N
zBt$9oD5{<1zw1r4724m|QUg@L?lh?`YT!qLllL$e=-3LwZ;ea~O@B0u*%(^Mb-%4S
zKlWMJp)*6W{`^S2-Z^JY5XWXA?H&7#(;;nQ%qa*RHRkgUK1@+sfXn+`m<DXo%g><}
zs0`(2x4n`&ory;p#oLg2#3sVFi~8tZvOBXD6nw<*HQHHMhc4Vib<hYgq0jlmzq`(9
zaOrQt=bNrM`nfm3@joPw-z1dK;?5|Ew7RZ7K*^l`-K5*l%C5ji1__e>aa*&RsbV95
zW3p=pQr<R$T|zVF%|c!!_|d2|FVltOz|^JbOl#b+(wm}NC4gW#gOb&z`uwYQnqacB
z8i3<(?0Nd2-1(H{!0|FDqwcTIeCvirdH!X$(e@preFUH~s=CxV?-7tc4XbXos<1pm
z{I=A%r&2a4!AwscuAv|Lfl?1y0~2rd><3>M&`P0|qV~upqWO{`O#=zb&zDexMebPV
zh(Kf-_o*gK5LAoC{8xZk_7LP$t2fbtVIaEqGbs<4{&W6n{Lg#VzB{#Gy0CQj-sDDe
zw2ZE&muBpzz1+e`2R`fw_Xh;lW<q@<XjvfgO{p(O)grC`hLMuclk?b#n?aVQkRKRL
z?u)YaZ2Aq>y8^F5chAa~*B`t9!ri7gOW)V0o`E>6AE>`a)Uoxyn5Xi)T1YPc)TQA5
zY5wAsT?BxyV75QtOl^yMLrD;n0?uGU^II(TLYN1q#~j4ZQa|r%z%^tR_tHl?rP{CB
zfS9Q$R>=HVihB8ekT}gfUj~L*gc#|bm)Kon@`GjUITg%%k2NP7=hGuEIs#p9@IK`c
zVo9maE6&S6Km|;NK70X4<b~EJe}0jR9d8iAP_WwXfQJkDeh@e}YM`&x9a_a3s;H;*
z=<L@Fy98o%aj6HShTWz=bomKA)bh#jRB=jVb(DeD!smz2`b@a_l^^cFF-(CgR_d@$
z%~KebV9)*S2jHOA9AR=!+xigtHOdjZodZdat*h8UxeJ0APCJwS#si9~4xL*-m$byY
zmax{vjlMBZTwra@zk4FJ4ynko)dLkm&}BZ}9sbHq&6=$TpfU0g$!fbKYVxYU5<Vk@
z0E$H4EmzqML0r!*6b1g^gu)`|=F7Ux_Y9RWp@z0VJsDH2)cA1i+)R$R(+Qo<49{Va
z^>(st^MPAsOPL!WbB!N09G$$Pl8(z*2q}R!k>A_Wt?^{trNMprU^$S&mK2YIQ<RxZ
zQ|e#sf=|JF86jaGpgfHUC$sl2=;e?v&Z;Y5oR0@p>H+G<Obm1w%Ifx8o1dz<9!b-n
zZP`1r-r+84^pTccY05-Q7fn_E;{mihhg<nuwnU4bm8>8_EX5-vceMKMDyrg44q-dY
zYTZwIWanzCf7&P5{wW6j$J{SDWGAQRwmV#+l+LM{6ILzc?2ENsFn`7AZVZ4L=BsVp
zI`0REx;XZF5mVW_TP-Sdu<dq($L0mIyUA;VQKt@@R!LUWvj4D4=;&3O`%*MyLt@P3
ze;xqQTA|<W#)`)K9e8)b$MAN~3X>W}C0?oU++#{6s|fhV+mP`Gl3Zef5{^_Wc^$<V
z_}Yd-Ad3onssv5cfdj)6iOYk(n}x{cPaa$~2NbN=8eG&sxspccFdR91<jOLO<syE3
zM|>jF11%<1q#Jd5X`^++y-;?42IW#YbaLEZ{zjrb_XDxwWpT&@DH6xC4<ku!H9?8`
z@Q?rm0RV!Dt%b8tRwEw2=1>U>uT;xjA=&sVlRBC6MrPU1TNTSJ7Tu;FDChhE4gmeY
zFcelS^hO96WKrcrx9mB1dW_I}$5RN?NcNGicD^YoDR8Zw76X=Db1f38j*}gnYZ%=y
zhvV`S+wJ}g<h(fht!}DuT{B>l?*a4le4dcAL6fHwj1Wluwp0{0Ys?B2U@Y;y3XnXt
zMLGMYCmZ`i;ah0?e|tJ*0jouPJXZ`r1_&l26avQ>j_gDx4lPLZP{5??!>5msQx5eA
z*aBtr94_KzBbr!1l^1OCpYU!kQt(-W<Zw~S9tdfP9ZW^=ZaD|2#tkvtXW@QVdVW`^
z|6}Me)oAD|{_a{I=xA6_3V|(xf$mu6jPgDMYGeq;r?BN<35bQ|B2;PjLRmA47Iikg
zPuj`IRYWJxsq(1A>}$cRi`v38X3?qbhYljAf%^9$n4AE1MbE(I*Pu*Y63Gx#*?+|&
zSWYQY^H|#%OMn>x2uf4;recnEWg1nDH2qA2!yWHQ(sl?Y)hl9%ykcZSj=XzZcmCl>
zwt2peWSd-3#ZyM6{xxYKS(_6Oz<kN1(bA|enw*{VNyZS8fg-Ag=a`C|1&wf4$OEHV
zo<|+Mc}#P4v2)=s6nt#+sw}bxUit67@$k{)Z{A9|45p)+0Qos7yWD+L@$Qsx_oG25
z0YU&%G86lQA~>6ITAg3GL0aJ&i{_prWkp`)C|Ac>_cS=+#h8KjMpXri?pHGwRyN5r
zo#d-Kb@$zmCjmUN>$Y>Rnlu7CZrJL83z2d%9nm6Xl{_pFR%!3SC)#RqF}?)p+P)63
z+seT@G^$A_L<|Wg)Q|8`Ljh1q1e|lQ&AK*1Jfc2fpydMASrfKClhkHBp&Mm7t3#Rj
zqR8Itr(aH+Ygdh^*oxD$HuWJ2{-@hb^pb1JTc_k!kOU-B`Ri6JkcXN`QNiMRJ1A?s
zW7;s7;laR_eH$L+ad@uu>IvQnq9Z;#lF=A@kAqB!tn|*Q`L^mB>WRSYA?Go*@J?bd
z6nP?EF>Ul=N&&L^nU-h7paOMNBwqXDR+3)c#%)G`w2e>|#ETfPk?|R8BE(hXiIrHH
zKZ1&h7DrUlp(*9x-_bK?ZTsbbp6@x7<II(2QK%+rnlFm2B@m=E2+_?>9XQxU8FO25
zuFNt}GJDw|M-pvb?b;B%<9D51owMmARl5tlt2MdA0puRk3G&<?LYi>k>Gi>X38ZDi
z_9pTfA9JJXha4p~8aNZS8X@^6gv_jNv}IzTiQR^KwOpdQ6ytkXwFT#v|A%J|e`@kP
zu>pNb$HU4A@f@ts>wsAj(7_^llfFdpLZYsVNdGigg2yVgHv4iwLOJ5yc1g&B?jOC1
zi4yFIkGF`}6)~0X@m@)2oN91`WbK&1Ybmg&EX{oQ{mO(UPmpW;n<}E3r7hWc^32S>
zJQoPV?K(RXqNJ5h&{8a4g?_UQ{M}H<-6oyShyuTk=<2*)v^R}gF8}*iRnj+yh}QRB
zj&S1xYds&gDxJ~<8rk~DuPo@Eci&R?!{XWoA+%jU#eroXE%T!@cN#szi1{SJ+bf59
z?8!j-{ZCl&Z39|2YhAPvs+RQaDcL#u4(Rn;Uu&%LiQZ(UR4c<xO$v{A49sagMrUI=
z46HAZDLZiS((JfC$#IQ9LB=fxvKrePTcKqP&RIcH`nb$Ia-)V;!(8KK_7aR_6*Io<
znR4@%Pz^VP4NB_Sw^LW%eH-4~;-~e~hWLXgoU^rw4r`WBIL12UP7b{_>agW)U%^kI
z>uv5|_ip_Q=~z!nJ+|rEdCp{)3d)+E3g0KPCaDU-DUHW0hb?Bn|4^Zn7lo5@(WmX@
zZO>(ZR1(sGRccnTkgE8$$zFMhqsv@oFH2?|>{7Jw<9Bi{Tm?;H&W&JzUcxyw!n2_K
zecyiUigvajmThE4|DTN!*+4n*h)NSf6%DBXw=Dp)Gxd!6^VMcR{f5>Pxa%ix&*<TH
z-h!$s7>1^uylvNPbEV-CQA%Ut#z53xfy!D`5ojywm*dqi4uza$&h$U=Ms8{^tH6yB
zlX>By%Es&9Tf#3NO6A<4euj$6CO9kRq7_-2D51)4-Oz_#VJ!duz5Fn38!vtqir=*Y
QKGPVwl_Ra%;&9x50ir%7?*IS*

literal 0
HcmV?d00001

diff --git a/public/login.html b/public/login.html
index e69de29bb..eb05d012f 100644
--- a/public/login.html
+++ b/public/login.html
@@ -0,0 +1,71 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <base href="/">
+    <meta charset="utf-8">
+    <meta name="viewport"
+        content="width=device-width, viewport-fit=cover, initial-scale=1, maximum-scale=1.0, user-scalable=no">
+    <meta name="apple-mobile-web-app-capable" content="yes">
+    <meta name="darkreader-lock">
+    <meta name="robots" content="noindex, nofollow" />
+    <link rel="apple-touch-icon" sizes="57x57" href="img/apple-icon-57x57.png" />
+    <link rel="apple-touch-icon" sizes="72x72" href="img/apple-icon-72x72.png" />
+    <link rel="apple-touch-icon" sizes="114x114" href="img/apple-icon-114x114.png" />
+    <link rel="apple-touch-icon" sizes="144x144" href="img/apple-icon-144x144.png" />
+    <link rel="stylesheet" type="text/css" href="style.css">
+    <link rel="stylesheet" type="text/css" href="css/st-tailwind.css">
+    <link rel="stylesheet" type="text/css" href="css/login.css">
+    <link rel="manifest" crossorigin="use-credentials" href="manifest.json">
+    <link href="webfonts/NotoSans/stylesheet.css" rel="stylesheet">
+    <!-- fontawesome webfonts-->
+    <link href="css/fontawesome.css" rel="stylesheet">
+    <link href="css/solid.css" rel="stylesheet">
+    <script src="lib/jquery-3.5.1.min.js"></script>
+    <script src="scripts/login.js"></script>
+    <title>SillyTavern</title>
+</head>
+
+<body class="login" style="display: none;">
+    <div id="shadow_popup">
+        <div id="dialogue_popup">
+            <div id="dialogue_popup_holder">
+                <div id="dialogue_popup_text">
+                    <div id="userSelectBlock" class="flex-container flexFlowColumn alignItemsCenter">
+                        <h2 id="logoBlock" class="flex-container">
+                            <img src="img/logo.png" alt="SillyTavern" class="logo">
+                            <span>Welcome to SillyTavern</span>
+                        </h2>
+                        <h3>Select a User</h3>
+                        <div id="userListBlock" class="wide100p">
+                            <div id="userList" class="flex-container justifyCenter"></div>
+                            <div id="passwordEntryBlock" style="display:none;"
+                                class="flex-container flexFlowColumn alignItemsCenter">
+                                <input id="userPassword" class="text_pole" type="password" placeholder="Enter a password...">
+                                <div class="flex-container">
+                                    <div id="loginButton" class="menu_button">Login</div>
+                                    <div id="recoverPassword" class="menu_button">Recover</div>
+                                </div>
+                            </div>
+                            <div id="passwordRecoveryBlock" style="display:none;"
+                                class="flex-container flexFlowColumn alignItemsCenter">
+                                <div id="recoverMessage">
+                                    Recovery code has been posted to the server console.
+                                </div>
+                                <input id="recoveryCode" class="text_pole" type="text" placeholder="Recovery code">
+                                <input id="newPassword" class="text_pole" type="password" placeholder="New password...">
+                                <div class="flex-container">
+                                    <div id="sendRecovery" class="menu_button">Send</div>
+                                    <div id="cancelRecovery" class="menu_button">Cancel</div>
+                                </div>
+                            </div>
+                        </div>
+                        <div class="neutral_warning" id="errorMessage">
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+</body>
+
+</html>
diff --git a/public/scripts/loader.js b/public/scripts/loader.js
index 179a0437b..91e7df196 100644
--- a/public/scripts/loader.js
+++ b/public/scripts/loader.js
@@ -1,7 +1,5 @@
 const ELEMENT_ID = 'loader';
 
-import { populateUserList } from './userManagement.js'
-
 export function showLoader() {
     const container = $('<div></div>').attr('id', ELEMENT_ID);
     const loader = $('<div></div>').attr('id', 'load-spinner').addClass('fa-solid fa-gear fa-spin fa-3x');
@@ -10,7 +8,6 @@ export function showLoader() {
 }
 
 export async function hideLoader() {
-
     //Sets up a 2-step animation. Spinner blurs/fades out, and then the loader shadow does the same.
     $('#load-spinner').on('transitionend webkitTransitionEnd oTransitionEnd MSTransitionEnd', function () {
         //uncomment this as part of user selection enabling
@@ -35,8 +32,4 @@ export async function hideLoader() {
 
     //uncomment to make user selection live
     //await populateUserList()
-
-
 }
-
-
diff --git a/public/scripts/login.js b/public/scripts/login.js
new file mode 100644
index 000000000..ef34b6747
--- /dev/null
+++ b/public/scripts/login.js
@@ -0,0 +1,142 @@
+async function getUserList() {
+    const response = await fetch('/api/users/list');
+    const userListObj = await response.json();
+    console.log(userListObj);
+    return userListObj;
+}
+
+async function sendRecoveryPart1(handle) {
+    const response = await fetch('/api/users/recover-step1', {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ handle }),
+    });
+
+    if (!response.ok) {
+        const errorData = await response.json();
+        return displayError(errorData.error || 'An error occurred');
+    }
+
+    showRecoveryBlock();
+}
+
+async function sendRecoveryPart2(handle, code, newPassword) {
+    const recoveryData = {
+        handle,
+        code,
+        newPassword,
+    };
+
+    const response = await fetch('/api/users/recover-step2', {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(recoveryData),
+    });
+
+    if (!response.ok) {
+        const errorData = await response.json();
+        return displayError(errorData.error || 'An error occurred');
+    }
+
+    console.log(`Successfully recovered password for ${handle}!`);
+    await performLogin(handle, newPassword);
+}
+
+async function onUserSelected(user) {
+    // No password, just log in
+    if (!user.password) {
+        return await performLogin(user.handle, '');
+    }
+
+    $('#passwordRecoveryBlock').hide();
+    $('#passwordEntryBlock').show();
+    $('#loginButton').off('click').on('click', async () => {
+        const password = String($('#userPassword').val());
+        await performLogin(user.handle, password);
+    });
+
+    $('#recoverPassword').off('click').on('click', async () => {
+        await sendRecoveryPart1(user.handle);
+    });
+
+    $('#sendRecovery').off('click').on('click', async () => {
+        const code = String($('#recoveryCode').val());
+        const newPassword = String($('#newPassword').val());
+        await sendRecoveryPart2(user.handle, code, newPassword);
+    });
+
+    displayError('');
+}
+
+function displayError(message) {
+    $('#errorMessage').text(message);
+}
+
+async function performLogin(handle, password) {
+    const userInfo = {
+        handle: handle,
+        password: password,
+    };
+
+    try {
+        const response = await fetch('/api/users/login', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(userInfo),
+        });
+
+        if (!response.ok) {
+            const errorData = await response.json();
+            return displayError(errorData.error || 'An error occurred');
+        }
+
+        const data = await response.json();
+
+        if (data.handle) {
+            console.log(`Successfully logged in as ${handle}!`);
+            redirectToHome();
+        }
+    } catch (error) {
+        console.error('Error logging in:', error);
+        displayError(String(error));
+    }
+}
+
+function redirectToHome() {
+    window.location.href = '/';
+}
+
+function showRecoveryBlock() {
+    $('#passwordEntryBlock').hide();
+    $('#passwordRecoveryBlock').show();
+    displayError('');
+}
+
+function onCancelRecoveryClick() {
+    $('#passwordRecoveryBlock').hide();
+    $('#passwordEntryBlock').show();
+    displayError('');
+}
+
+(async function () {
+    const userList = await getUserList();
+    console.log(userList);
+    for (const user of userList) {
+        const userBlock = $('<div></div>').addClass('userSelect');
+        const avatarBlock = $('<div></div>').addClass('avatar');
+        avatarBlock.append($('<img>').attr('src', user.avatar));
+        userBlock.append(avatarBlock);
+        userBlock.append($('<span></span>').text(user.name));
+        userBlock.append($('<small></small>').text(user.handle));
+        userBlock.on('click', () => onUserSelected(user));
+        $('#userList').append(userBlock);
+    }
+    document.body.style.display = '';
+    $('#cancelRecovery').on('click', onCancelRecoveryClick);
+})();
diff --git a/public/scripts/userManagement.js b/public/scripts/userManagement.js
index eff0b02b3..e3cd9d34f 100644
--- a/public/scripts/userManagement.js
+++ b/public/scripts/userManagement.js
@@ -1,10 +1,3 @@
-async function getUserList() {
-    const response = await fetch('/api/users/list');
-    const userListObj = await response.json(); // Assuming the response is in JSON format
-    console.log(userListObj)
-    return userListObj;
-}
-
 async function registerNewUser() {
     let handle = String($("#newUserHandle").val());
     let name = String($("#newUserName").val());
@@ -111,17 +104,6 @@ export async function populateUserList() {
     `
 
     const userSelectHTML = `
-    <div id="userSelectBlock" class="flex-container flexFlowColumn alignItemsCenter">
-        <h3>Select User</h3>
-        <small>This is merely a test. <br> Click a user, and then click Login to proceed.</small>
-        <div id="userListBlock">
-            <div id="userList" class="flex-container justifyCenter"></div>
-            <div id="passwordEntryBlock" style="display:none;" class="flex-container flexFlowColumn alignItemsCenter">
-                <h4 id="passwordHeaderText"></h4>
-                <input id="userPassword" class="text_pole" type="password">
-                <div id="loginButton" class='menu_button'>Login</div>
-            </div>
-        </div>
 
         <div id="registerNewUserBlock" style="display:none;">
            ${newUserRegisterationHTML}
diff --git a/server.js b/server.js
index bf35c9f1e..2b8b2870e 100644
--- a/server.js
+++ b/server.js
@@ -18,6 +18,7 @@ const doubleCsrf = require('csrf-csrf').doubleCsrf;
 const express = require('express');
 const compression = require('compression');
 const cookieParser = require('cookie-parser');
+const cookieSession = require('cookie-session');
 const multer = require('multer');
 const responseTime = require('response-time');
 const helmet = require('helmet').default;
@@ -33,14 +34,7 @@ util.inspect.defaultOptions.maxStringLength = null;
 util.inspect.defaultOptions.depth = 4;
 
 // local library imports
-const {
-    initUserStorage,
-    ensurePublicDirectoriesExist,
-    userDataMiddleware,
-    migrateUserData,
-    getCsrfSecret,
-    getCookieSecret,
-} = require('./src/users');
+const userModule = require('./src/users');
 const basicAuthMiddleware = require('./src/middleware/basicAuth');
 const whitelistMiddleware = require('./src/middleware/whitelist');
 const contentManager = require('./src/endpoints/content-manager');
@@ -122,6 +116,7 @@ const autorun = (cliArguments.autorun ?? getConfigValue('autorun', DEFAULT_AUTOR
 const listen = cliArguments.listen ?? getConfigValue('listen', DEFAULT_LISTEN);
 const enableCorsProxy = cliArguments.corsProxy ?? getConfigValue('enableCorsProxy', DEFAULT_CORS_PROXY);
 const basicAuthMode = getConfigValue('basicAuthMode', false);
+const enableAccounts = getConfigValue('enableUserAccounts', false);
 
 const { UPLOADS_PATH } = require('./src/constants');
 
@@ -136,40 +131,6 @@ app.use(CORS);
 if (listen && basicAuthMode) app.use(basicAuthMiddleware);
 
 app.use(whitelistMiddleware(listen));
-app.use(userDataMiddleware(app));
-
-// CSRF Protection //
-if (!cliArguments.disableCsrf) {
-    const COOKIES_SECRET = getCookieSecret();
-
-    const { generateToken, doubleCsrfProtection } = doubleCsrf({
-        getSecret: getCsrfSecret,
-        cookieName: 'X-CSRF-Token',
-        cookieOptions: {
-            httpOnly: true,
-            sameSite: 'strict',
-            secure: false,
-        },
-        size: 64,
-        getTokenFromRequest: (req) => req.headers['x-csrf-token'],
-    });
-
-    app.get('/csrf-token', (req, res) => {
-        res.json({
-            'token': generateToken(res, req),
-        });
-    });
-
-    app.use(cookieParser(COOKIES_SECRET));
-    app.use(doubleCsrfProtection);
-} else {
-    console.warn('\nCSRF protection is disabled. This will make your server vulnerable to CSRF attacks.\n');
-    app.get('/csrf-token', (req, res) => {
-        res.json({
-            'token': 'disabled',
-        });
-    });
-}
 
 if (enableCorsProxy) {
     const bodyParser = require('body-parser');
@@ -221,17 +182,85 @@ if (enableCorsProxy) {
     });
 }
 
-app.use(express.static(process.cwd() + '/public', {}));
-app.use('/', require('./src/users').router);
+app.use(cookieSession({
+    name: userModule.getCookieSessionName(),
+    sameSite: 'strict',
+    httpOnly: true,
+    maxAge: 24 * 60 * 60 * 1000, // 24 hours
+    secret: userModule.getCookieSecret(),
+}));
 
-app.use(multer({ dest: UPLOADS_PATH, limits: { fieldSize: 10 * 1024 * 1024 } }).single('avatar'));
-app.get('/', function (request, response) {
-    response.sendFile(process.cwd() + '/public/index.html');
+app.use(userModule.setUserDataMiddleware);
+
+// Static files
+// Host index page
+app.get('/', (request, response) => {
+    if (userModule.shouldRedirectToLogin(request)) {
+        return response.redirect('/login');
+    }
+
+    return response.sendFile('index.html', { root: path.join(process.cwd(), 'public') });
 });
 // Host login page
-app.get('/login', (_request, response) => {
+app.get('/login', async (request, response) => {
+    if (!enableAccounts) {
+        console.log('User accounts are disabled. Redirecting to index page.');
+        return response.redirect('/');
+    }
+
+    const autoLogin = await userModule.tryAutoLogin(request);
+
+    if (autoLogin) {
+        return response.redirect('/');
+    }
+
     return response.sendFile('login.html', { root: path.join(process.cwd(), 'public') });
 });
+app.use(express.static(process.cwd() + '/public', {}));
+
+app.use('/api/users', userModule.publicEndpoints);
+
+app.use(userModule.requireLoginMiddleware);
+
+// CSRF Protection //
+if (!cliArguments.disableCsrf) {
+    const COOKIES_SECRET = userModule.getCookieSecret();
+
+    const { generateToken, doubleCsrfProtection } = doubleCsrf({
+        getSecret: userModule.getCsrfSecret,
+        cookieName: 'X-CSRF-Token',
+        cookieOptions: {
+            httpOnly: true,
+            sameSite: 'strict',
+            secure: false,
+        },
+        size: 64,
+        getTokenFromRequest: (req) => req.headers['x-csrf-token'],
+    });
+
+    app.get('/csrf-token', (req, res) => {
+        res.json({
+            'token': generateToken(res, req),
+        });
+    });
+
+    app.use(cookieParser(COOKIES_SECRET));
+    app.use(doubleCsrfProtection);
+} else {
+    console.warn('\nCSRF protection is disabled. This will make your server vulnerable to CSRF attacks.\n');
+    app.get('/csrf-token', (req, res) => {
+        res.json({
+            'token': 'disabled',
+        });
+    });
+}
+
+// User management
+app.use('/', userModule.router);
+app.use('/api/users', userModule.authenticatedEndpoints);
+app.use('/api/users', userModule.adminEndpoints);
+
+app.use(multer({ dest: UPLOADS_PATH, limits: { fieldSize: 10 * 1024 * 1024 } }).single('avatar'));
 app.get('/version', async function (_, response) {
     const data = await getVersion();
     response.send(data);
@@ -481,10 +510,10 @@ const setupTasks = async function () {
 
     // TODO: do endpoint init functions depend on certain directories existing or not existing? They should be callable
     // in any order for encapsulation reasons, but right now it's unknown if that would break anything.
-    await initUserStorage();
+    await userModule.initUserStorage();
     await settingsEndpoint.init();
-    const directories = await ensurePublicDirectoriesExist();
-    await migrateUserData();
+    const directories = await userModule.ensurePublicDirectoriesExist();
+    await userModule.migrateUserData();
     await contentManager.checkForNewContent(directories);
     await ensureThumbnailCache();
     cleanUploads();
diff --git a/src/users.js b/src/users.js
index 373c0ebbe..9c8ee7e2d 100644
--- a/src/users.js
+++ b/src/users.js
@@ -7,7 +7,6 @@ const os = require('os');
 // Express and other dependencies
 const storage = require('node-persist');
 const express = require('express');
-const cookieSession = require('cookie-session');
 const uuid = require('uuid');
 const mime = require('mime-types');
 const slugify = require('slugify').default;
@@ -400,7 +399,7 @@ function getCsrfSecret(request) {
  * @returns {Promise<string[]>} - The list of user handles
  */
 async function getAllUserHandles() {
-    const keys = await storage.keys(x=> x.key.startsWith(KEY_PREFIX));
+    const keys = await storage.keys(x => x.key.startsWith(KEY_PREFIX));
     const handles = keys.map(x => x.replace(KEY_PREFIX, ''));
     return handles;
 }
@@ -455,87 +454,100 @@ function getUserAvatar(handle) {
 }
 
 /**
- * Middleware to add user data to the request object.
- * @param {import('express').Express} app Express app
- * @returns {import('express').RequestHandler}
+ * Checks if the user should be redirected to the login page.
+ * @param {import('express').Request} request Request object
+ * @returns {boolean} Whether the user should be redirected to the login page
  */
-function userDataMiddleware(app) {
-    app.use(cookieSession({
-        name: getCookieSessionName(),
-        sameSite: 'strict',
-        httpOnly: true,
-        maxAge: 24 * 60 * 60 * 1000, // 24 hours
-        secret: getCookieSecret(),
-    }));
+function shouldRedirectToLogin(request) {
+    return ENABLE_ACCOUNTS && !request.user;
+}
 
-    /**
-     * Middleware to add user data to the request object.
-     * @param {import('express').Request} req Request object
-     * @param {import('express').Response} res Response object
-     * @param {import('express').NextFunction} next Next function
-     */
-    return async (req, res, next) => {
-        // Skip for login page
-        if (req.path === '/login') {
-            return next();
+/**
+ * Tries auto-login if there is only one user and it's not password protected.
+ * @param {import('express').Request} request Request object
+ * @returns {Promise<boolean>} Whether auto-login was performed
+ */
+async function tryAutoLogin(request) {
+    if (!ENABLE_ACCOUNTS || request.user || !request.session) {
+        return false;
+    }
+
+    const userHandles = await getAllUserHandles();
+    if (userHandles.length === 1) {
+        const user = await storage.getItem(toKey(userHandles[0]));
+        if (!user.password) {
+            request.session.handle = userHandles[0];
+            return true;
         }
+    }
 
-        // If user accounts are disabled, use the default user
-        if (!ENABLE_ACCOUNTS) {
-            const handle = DEFAULT_USER.handle;
-            const directories = getUserDirectories(handle);
-            req.user = {
-                profile: DEFAULT_USER,
-                directories: directories,
-            };
-            return next();
-        }
-
-        if (!req.session) {
-            console.error('Session not available');
-            return res.sendStatus(500);
-        }
-
-        // If user accounts are enabled, get the user from the session
-        let handle = req.session?.handle;
-
-        // If we have the only user and it's not password protected, use it
-        if (!handle) {
-            const handles = await getAllUserHandles();
-            if (handles.length === 1) {
-                /** @type {User} */
-                const user = await storage.getItem(toKey(handles[0]));
-                if (!user.password) {
-                    handle = user.handle;
-                    req.session.handle = handle;
-                }
-            }
-        }
-
-        if (!handle) {
-            return res.redirect('/login');
-        }
-
-        /** @type {User} */
-        const user = await storage.getItem(toKey(handle));
-
-        if (!user) {
-            console.error('User not found:', handle);
-            return res.redirect('/login');
-        }
-
-        if (!user.enabled) {
-            console.error('User is disabled:', handle);
-            return res.redirect('/login');
-        }
+    return false;
+}
 
+/**
+ * Middleware to add user data to the request object.
+ * @param {import('express').Request} request Request object
+ * @param {import('express').Response} response Response object
+ * @param {import('express').NextFunction} next Next function
+ */
+async function setUserDataMiddleware(request, response, next) {
+    // If user accounts are disabled, use the default user
+    if (!ENABLE_ACCOUNTS) {
+        const handle = DEFAULT_USER.handle;
         const directories = getUserDirectories(handle);
-        req.user = {
-            profile: user,
+        request.user = {
+            profile: DEFAULT_USER,
             directories: directories,
         };
         return next();
+    }
+
+    if (!request.session) {
+        console.error('Session not available');
+        return response.sendStatus(500);
+    }
+
+    // If user accounts are enabled, get the user from the session
+    let handle = request.session?.handle;
+
+    // If we have the only user and it's not password protected, use it
+    if (!handle) {
+        return next();
+    }
+
+    /** @type {User} */
+    const user = await storage.getItem(toKey(handle));
+
+    if (!user) {
+        console.error('User not found:', handle);
+        return next();
+    }
+
+    if (!user.enabled) {
+        console.error('User is disabled:', handle);
+        return next();
+    }
+
+    const directories = getUserDirectories(handle);
+    request.user = {
+        profile: user,
+        directories: directories,
     };
+    return next();
+}
+
+/**
+ * Middleware to add user data to the request object.
+ * @param {import('express').Request} request Request object
+ * @param {import('express').Response} response Response object
+ * @param {import('express').NextFunction} next Next function
+ */
+function requireLoginMiddleware(request, response, next) {
+    if (!request.user) {
+        return response.sendStatus(401);
+    }
+
+    return next();
 }
 
 /**
@@ -588,40 +600,60 @@ router.use('/user/images/*', createRouteHandler(req => req.user.directories.user
 router.use('/user/files/*', createRouteHandler(req => req.user.directories.files));
 router.use('/scripts/extensions/third-party/*', createRouteHandler(req => req.user.directories.extensions));
 
-const endpoints = express.Router();
+const publicEndpoints = express.Router();
 
-endpoints.get('/list', async (_request, response) => {
+publicEndpoints.get('/list', async (_request, response) => {
     /** @type {User[]} */
     const users = await storage.values();
-    const viewModels = users.filter(x => x.enabled).map(user => ({
-        handle: user.handle,
-        name: user.name,
-        avatar: getUserAvatar(user.handle),
-        admin: user.admin,
-        password: !!user.password,
-    }));
+    const viewModels = users
+        .filter(x => x.enabled)
+        .sort((x, y) => x.created - y.created)
+        .map(user => ({
+            handle: user.handle,
+            name: user.name,
+            avatar: getUserAvatar(user.handle),
+            admin: user.admin,
+            password: !!user.password,
+        }));
 
     return response.json(viewModels);
 });
 
-endpoints.get('/me', async (request, response) => {
-    if (!request.user) {
-        return response.sendStatus(401);
+publicEndpoints.post('/login', jsonParser, async (request, response) => {
+    if (!request.body.handle) {
+        console.log('Login failed: Missing required fields');
+        return response.status(400).json({ error: 'Missing required fields' });
     }
 
-    const user = request.user.profile;
-    const viewModel = {
-        handle: user.handle,
-        name: user.name,
-        avatar: getUserAvatar(user.handle),
-        admin: user.admin,
-        password: !!user.password,
-    };
+    /** @type {User} */
+    const user = await storage.getItem(toKey(request.body.handle));
 
-    return response.json(viewModel);
+    if (!user) {
+        console.log('Login failed: User not found');
+        return response.status(401).json({ error: 'User not found' });
+    }
+
+    if (!user.enabled) {
+        console.log('Login failed: User is disabled');
+        return response.status(403).json({ error: 'User is disabled' });
+    }
+
+    if (user.password && user.password !== getPasswordHash(request.body.password, user.salt)) {
+        console.log('Login failed: Incorrect password');
+        return response.status(401).json({ error: 'Incorrect password' });
+    }
+
+    if (!request.session) {
+        console.error('Session not available');
+        return response.sendStatus(500);
+    }
+
+    request.session.handle = user.handle;
+    console.log('Login successful:', user.handle, request.session);
+    return response.json({ handle: user.handle });
 });
 
-endpoints.post('/recover-step1', jsonParser, async (request, response) => {
+publicEndpoints.post('/recover-step1', jsonParser, async (request, response) => {
     if (!request.body.handle) {
         console.log('Recover step 1 failed: Missing required fields');
         return response.status(400).json({ error: 'Missing required fields' });
@@ -641,13 +673,15 @@ endpoints.post('/recover-step1', jsonParser, async (request, response) => {
     }
 
     const mfaCode = Math.floor(Math.random() * 1000000).toString().padStart(6, '0');
-    console.log(color.blue(`${user.name} YOUR PASSWORD RECOVERY CODE IS: `) + color.magenta(mfaCode));
+    console.log();
+    console.log(color.blue(`${user.name}, your password recovery code is: `) + color.magenta(mfaCode));
+    console.log();
     MFA_CACHE.set(user.handle, mfaCode);
     return response.sendStatus(204);
 });
 
-endpoints.post('/recover-step2', jsonParser, async (request, response) => {
-    if (!request.body.handle || !request.body.code || !request.body.password) {
+publicEndpoints.post('/recover-step2', jsonParser, async (request, response) => {
+    if (!request.body.handle || !request.body.code) {
         console.log('Recover step 2 failed: Missing required fields');
         return response.status(400).json({ error: 'Missing required fields' });
     }
@@ -672,101 +706,40 @@ endpoints.post('/recover-step2', jsonParser, async (request, response) => {
         return response.status(401).json({ error: 'Incorrect code' });
     }
 
+    const newPassword = request.body.newPassword || '';
     const salt = getPasswordSalt();
-    user.password = getPasswordHash(request.body.password, salt);
+    user.password = getPasswordHash(newPassword, salt);
     user.salt = salt;
     await storage.setItem(toKey(user.handle), user);
     return response.sendStatus(204);
 });
 
-endpoints.post('/login', jsonParser, async (request, response) => {
-    if (!request.body.handle || !request.body.password) {
-        console.log('Login failed: Missing required fields');
-        return response.status(400).json({ error: 'Missing required fields' });
-    }
+const authenticatedEndpoints = express.Router();
 
-    /** @type {User} */
-    const user = await storage.getItem(toKey(request.body.handle));
-
-    if (!user) {
-        console.log('Login failed: User not found');
-        return response.status(401).json({ error: 'User not found' });
-    }
-
-    if (!user.enabled) {
-        console.log('Login failed: User is disabled');
-        return response.status(403).json({ error: 'User is disabled' });
-    }
-
-    if (user.password && user.password !== getPasswordHash(request.body.password, user.salt)) {
-        console.log('Login failed: Incorrect password');
-        return response.status(401).json({ error: 'Incorrect password' });
-    }
-
-    if (!request.session) {
-        console.error('Login failed: Session not available');
-        return response.status(500).json({ error: 'Session not available' });
-    }
-
-    // Regenerate session to prevent session fixation attacks
-    await new Promise(resolve => request.session?.regenerate(resolve));
-
-
-    request.session.handle = user.handle;
-    console.log('Login successful:', user.handle, request.session);
-    return response.json({ handle: user.handle });
-});
-
-endpoints.post('/logout', async (request, response) => {
+authenticatedEndpoints.post('/logout', async (request, response) => {
     request.session?.destroy(() => {
         return response.sendStatus(204);
     });
 });
 
-endpoints.post('/disable', requireAdminMiddleware, jsonParser, async (request, response) => {
-    if (!request.body.handle) {
-        console.log('Disable user failed: Missing required fields');
-        return response.status(400).json({ error: 'Missing required fields' });
+authenticatedEndpoints.get('/me', async (request, response) => {
+    if (!request.user) {
+        return response.sendStatus(401);
     }
 
-    if (request.body.handle === request.user.profile.handle) {
-        console.log('Disable user failed: Cannot disable yourself');
-        return response.status(400).json({ error: 'Cannot disable yourself' });
-    }
+    const user = request.user.profile;
+    const viewModel = {
+        handle: user.handle,
+        name: user.name,
+        avatar: getUserAvatar(user.handle),
+        admin: user.admin,
+        password: !!user.password,
+    };
 
-    /** @type {User} */
-    const user = await storage.getItem(toKey(request.body.handle));
-
-    if (!user) {
-        console.log('Disable user failed: User not found');
-        return response.status(404).json({ error: 'User not found' });
-    }
-
-    user.enabled = false;
-    await storage.setItem(toKey(request.body.handle), user);
-    return response.sendStatus(204);
+    return response.json(viewModel);
 });
 
-endpoints.post('/enable', requireAdminMiddleware, jsonParser, async (request, response) => {
-    if (!request.body.handle) {
-        console.log('Enable user failed: Missing required fields');
-        return response.status(400).json({ error: 'Missing required fields' });
-    }
-
-    /** @type {User} */
-    const user = await storage.getItem(toKey(request.body.handle));
-
-    if (!user) {
-        console.log('Enable user failed: User not found');
-        return response.status(404).json({ error: 'User not found' });
-    }
-
-    user.enabled = true;
-    await storage.setItem(toKey(request.body.handle), user);
-    return response.sendStatus(204);
-});
-
-endpoints.post('/change-password', jsonParser, async (request, response) => {
+authenticatedEndpoints.post('/change-password', jsonParser, async (request, response) => {
     if (!request.body.handle || !request.body.oldPassword || !request.body.newPassword) {
         console.log('Change password failed: Missing required fields');
         return response.status(400).json({ error: 'Missing required fields' });
@@ -797,7 +770,52 @@ endpoints.post('/change-password', jsonParser, async (request, response) => {
     return response.sendStatus(204);
 });
 
-endpoints.post('/create', requireAdminMiddleware, jsonParser, async (request, response) => {
+const adminEndpoints = express.Router();
+
+adminEndpoints.post('/disable', requireAdminMiddleware, jsonParser, async (request, response) => {
+    if (!request.body.handle) {
+        console.log('Disable user failed: Missing required fields');
+        return response.status(400).json({ error: 'Missing required fields' });
+    }
+
+    if (request.body.handle === request.user.profile.handle) {
+        console.log('Disable user failed: Cannot disable yourself');
+        return response.status(400).json({ error: 'Cannot disable yourself' });
+    }
+
+    /** @type {User} */
+    const user = await storage.getItem(toKey(request.body.handle));
+
+    if (!user) {
+        console.log('Disable user failed: User not found');
+        return response.status(404).json({ error: 'User not found' });
+    }
+
+    user.enabled = false;
+    await storage.setItem(toKey(request.body.handle), user);
+    return response.sendStatus(204);
+});
+
+adminEndpoints.post('/enable', requireAdminMiddleware, jsonParser, async (request, response) => {
+    if (!request.body.handle) {
+        console.log('Enable user failed: Missing required fields');
+        return response.status(400).json({ error: 'Missing required fields' });
+    }
+
+    /** @type {User} */
+    const user = await storage.getItem(toKey(request.body.handle));
+
+    if (!user) {
+        console.log('Enable user failed: User not found');
+        return response.status(404).json({ error: 'User not found' });
+    }
+
+    user.enabled = true;
+    await storage.setItem(toKey(request.body.handle), user);
+    return response.sendStatus(204);
+});
+
+adminEndpoints.post('/create', requireAdminMiddleware, jsonParser, async (request, response) => {
     if (!request.body.handle || !request.body.name) {
         console.log('Create user failed: Missing required fields');
         return response.status(400).json({ error: 'Missing required fields' });
@@ -834,16 +852,21 @@ endpoints.post('/create', requireAdminMiddleware, jsonParser, async (request, re
     return response.json({ handle: newUser.handle });
 });
 
-router.use('/api/users', endpoints);
-
 module.exports = {
     initUserStorage,
     ensurePublicDirectoriesExist,
     getAllUserHandles,
     getUserDirectories,
-    userDataMiddleware,
+    setUserDataMiddleware,
+    requireLoginMiddleware,
     migrateUserData,
     getCsrfSecret,
     getCookieSecret,
+    getCookieSessionName,
     router,
+    publicEndpoints,
+    authenticatedEndpoints,
+    adminEndpoints,
+    shouldRedirectToLogin,
+    tryAutoLogin,
 };