﻿The following authentication system specification is missing critical edge cases. Identify at least 7 missing requirements that would cause security vulnerabilities or user-facing bugs if not addressed.

"Users register with email and password. Users log in with email and password and receive a JWT. The JWT is included in the Authorization header for all subsequent requests. Admins can view all users. Users can only view their own profile."
