api-todo

POST /api/accounts/login
	input: { username: string, password: string }
	output: { status: number, response: string, token: string | null }
		"Set-Cookie" -- token cookie { iat: number, exp: number, sub: string, roles: string[] }

POST /api/accounts/create
	requires: admin
	input: { username: string, password: string, roles?: { [key]: string } }
	output: { status: number, response: string }

GET /api/accounts/roles
	requires: admin
	output: { status: number, response: string, roles: string[] }

GET /api/accounts/roles/:role
	requires: admin
	output: { status: number, response: string, users: string[] }

GET /api/accounts/users/roles/:username
	requires: admin or current user
	output: { status: number, response: number, roles: string[] }

PUT /api/accounts/users/roles/:username
	requires: admin
	input: { roles: string[] }
	output: { status: number, response: string }

PATCH /api/accounts/users/roles/:username
	requires: admin
	input: { remove?: string[], add?: string[] }
	output: { status: number, response: string }

PUT /api/accounts/users/password/:username
    requires: admin or current user
    input: { password: string }
    output: { status: number, response: string }

DELETE /api/accounts/users/:username
	requires: admin
	input: none
	output: { status: number, response: string }

GET /api/books/cover/:id
    output: image

GET /api/books/metadata/:id
	output: { status: number, response: string, id: string, title: string, size: number, metadata: { [key: string]: string } }

GET /api/books/thumbnail/:id
    output: image

GET /api/books/download/:id
    output: file

GET /api/books/view/:id
	output: file

POST /api/books
	requires: librarian
	input: multipart-formdata:
		title: string
		book:
			Content-Type: application/pdf
			[[ binary pdf content ]]
		output: { status: number, response: string, id: string | null }

PUT /api/books/metadata/:id
	requires: librarian
	input: { title?: string, metadata?: { key: string, value: string }[] | { [string]: string } }
	output: { status: number, response: string }

PATCH /api/books/metadata/:id
	requires: librarian
	input: { title?: string, add?: { key: string, value: string }[] | { [string]: string }, remove?: string[] }
	output: { status: number, response: string }

DELETE /api/books/:id
	requires: librarian
	output: { status: number, response: string }

GET /api/search/query/:query?count=num&page=num
	output: { status: number, response: string, results: { id: string, title: string, size: number, metadata: { [key: string]: string } }[] }

GET /api/search/count/:query
	output: { status: number, response: string, count: number }