pulls up the stored password hash via user email and checks if the supplied password on login attempt matches.

Generates a token and assigns an email to its claims.

parses a token and returns the email in its claims .