Auth endpoint: POST /api/auth/token | Protected endpoint: GET /api/report/general-visit