☐ tests
  ☐ docusaurus
  ☐ tear apart site + api (and easy tests for them)
  ☐ investigate RPC for API servers
  ☐ make the user schema a variable
  ☐ split website server and api server
  ☐ hmr for api server
  ☐ session + jwt solution (for ssr)
  ☐ (security) reset password cannot answer "not found" for non existent email