pub async fn issue_session( pool: &SqlitePool, cfg: &Config, user_id: &str, ) -> Result<(String, DateTime<Utc>)>
Issue a login session for a user, returning the bearer token (shown once) and its expiry.