- Add AdminMiddleware for protecting sensitive operations - Update JWT generation to include user role and details - Modify login/registration to use enhanced JWT claims - Update main.go to set admin-protected routes - Add user role to JWT context for downstream handlers