add: cors handler route and readme

internal/api/handlers/auth.go

@@ -34,7 +34,7 @@ func (h *AuthHandler) Login(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	// Authenticate user
+	// Authenticate user using mock database
 	response, err := h.authService.Login(req.Email, req.Password)
 	if err != nil {
 		h.logger.Warn("Login failed", zap.Error(err), zap.String("email", req.Email))
@@ -42,6 +42,12 @@ func (h *AuthHandler) Login(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	// Log successful login with role information
+	h.logger.Info("User logged in successfully",
+		zap.String("email", req.Email),
+		zap.String("userID", response.User.ID),
+		zap.String("role", response.User.Role))
+
 	// Return tokens and user info
 	w.Header().Set("Content-Type", "application/json")
 	w.WriteHeader(http.StatusOK)