Summary: 7 instances, 5 unique

Text	Count
// TODO: Retrieve signing key from a data store or KMS??	2
//res.setHeader('Set-Cookie',`londonsheriff-Token=${token}; Secure; HttpOnly; Path=/`); // TODO: Production	1
// TODO: Authenticate the user credentials	1
//res.setHeader('Set-Cookie',`londonsheriff-Request-Id=${requestId}; Secure; HttpOnly; Path=/`); // TODO: Production	1
// TODO: Decide what to do when the passed token is not valid or expired	2