User Management: Register, login, update profile, delete user
Secure Authentication: Passport.js with session-based auth (stored in PostgreSQL)
Transaction Management: Create/read/update/delete transactions with user association
GraphQL API: Full schema with type validation
Session Persistence: PostgreSQL-backed session store