CheckPassword checks if the provided password matches the hash.

GenerateSecureToken generates a cryptographically secure random token.

HashPassword creates a bcrypt hash of the password.

ValidatePassword checks if a password meets security requirements.