updated ui, docs, tests

feat: add CSV question parser utility with unit tests

fix: add JWT secret warning and missing security tests

feat: implement JWT access token and refresh token generation

feat: implement bcrypt password hashing