auth.go
jwt/
oauth2/
password/
tfa/