const isValidPassword = bcrypt.compareSync(req.body.password, user.password); if (!isValidPassword) return res.status(401).send("Invalid credentials");