Defer update user's last login time on requests
Right now every request to the API updates the user's last login time in database.
While it's async and does not slow down access to the API, it could become a burden on the database.
Some optimization could be interesting to do. For example instead of writing to the database, writing to an array of user objects and syncing that array with the database every 5-10 minutes or so could work much better and lift some burden off the database.