pub async fn insert_session( db: &Db, token_hash: &str, user_id: i64, expires_at: DateTime<Utc>, ) -> Result<(), AuthError>