Authentication rate limiting and token validation.

[imayeshakhatoon]

This issue describes an authentication-related improvement.

Problem:

1. Failed login attempts are not rate limited
2. Expired access tokens are not handled properly
3. Password reset endpoint can be abused

Goal:
Improve API security by adding proper rate limiting and token validation.