v0.6.5 various updates

backend/src/routes/auth.js

@@ -24,6 +24,9 @@ router.post('/login', (req, res) => {
   const valid = bcrypt.compareSync(password, user.password);
   if (!valid) return res.status(401).json({ error: 'Invalid credentials' });
 
+  // Record last login timestamp
+  db.prepare("UPDATE users SET last_login = datetime('now') WHERE id = ?").run(user.id);
+
   const token = generateToken(user.id);
   const ua = req.headers['user-agent'] || '';
   const device = setActiveSession(user.id, token, ua); // displaces prior session on same device class

backend/src/routes/users.js

@@ -49,7 +49,7 @@ function getDefaultPassword(db) {
 router.get('/', authMiddleware, adminMiddleware, (req, res) => {
   const db = getDb();
   const users = db.prepare(`
-    SELECT id, name, email, role, status, is_default_admin, must_change_password, avatar, about_me, display_name, created_at
+    SELECT id, name, email, role, status, is_default_admin, must_change_password, avatar, about_me, display_name, created_at, last_login
     FROM users WHERE status != 'deleted'
     ORDER BY created_at ASC
   `).all();