Connessione protetta via HTTPS + JWT + TOTP 2FA