/api
Semua endpoint memerlukan Authorization: Bearer <token>
Authorization: Bearer <token>
/api/user/profile
/api/user/avatar