Login to buyer account

Access order status, address book, payment history and shipment confirmation.

JWT-based session flow is active for buyer and admin testing.

Password hashing and role-based access are now wired into the API.