query: parse the authentication token from a request

candidates:
- func parseAuthToken(req Request) Token validates and decodes the bearer token
- func renderTemplate(name string, data any) string expands an HTML template


query: render an HTML template with data

candidates:
- func parseAuthToken(req Request) Token validates and decodes the bearer token
- func renderTemplate(name string, data any) string expands an HTML template