(use the postman file you've received)
- sign up with username, email and password
- login with the username and password
- save the token you get from logging in for authentication (more on that below)
some routes are requiring authentication.
for those routes, add header named 'x-access-token' which value will be the token you get when logging in.