todo install jsonwebtoken DONE install @types/bcrypt DONE complete deserializeToken middleware function figure out how req.locals got typed in hobby-hob project DONE