Auth

GET /csrf
Accept: application/json

{
  "token": "abc123def456..."
}

POST /login
Content-Type: application/json

{
  "email": "admin@ems.edu.np",
  "password": "secret123"
}

{
  "success": true,
  "message": "Login successful",
  "data": {
    "user": {
      "id": 1,
      "name": "Admin",
      "email": "admin@ems.edu.np",
      "role": "superadmin"
    }
  }
}

{
  "success": false,
  "message": "Invalid credentials"
}

{
  "success": false,
  "message": "Validation failed",
  "errors": {
    "email": ["The email field is required."],
    "password": ["The password field is required."]
  }
}

POST /logout
Accept: application/json
X-CSRF-TOKEN: <token>

{
  "success": true,
  "message": "Logged out successfully"
}