auth.design.txt

General TODOS:
- re-factor models to singletons + update calls
- verify all models use QueryResult<> typing for results
- consider translating all queries to strings (memory impact)
- remove default exports
- remove return statements in routers
- clean up comments for DRY
- clean up imports + format docs
- refactor update logic in games.ts model to use new partial update logic OR switch all to use lodash
- remove fake user in middleware authenticateJwt()
- implement connection pooling

Phase 1
- players and games owned by users (including ai) [done]
- users have id, username, password, email and admin flag [done]
- default user exists and assigned if no authentication in place [done]
- user data not returned in endpoints [done]

Phase 2
- auth endpoints exist and token parsing exists on all endpoints [done]

Phase 3
- client updated to leverage authentication

Phase 4
- remove default user logic