Bug: Login fails with expired JWT tokens #1
Description
When a user's JWT token has expired, the validateToken function returns true instead of false. This causes authenticated requests to succeed with stale credentials.\n\nSteps to reproduce:\n1. Log in and get a JWT\n2. Wait for token to expire\n3. Try to access protected route\n4. Request succeeds when it should fail\n\nExpected: 401 Unauthorized\nActual: 200 OK with stale session