Fix backend test suite - all 20 tests passing

- Updated JWT tokens to include privlevel for authorization
- Fixed test fixtures to properly hash passwords with bcrypt
- Fixed client fixture to share database session with test fixtures
- Reordered deck router routes to prevent conflicts
- Removed relationship fields from FolderResponse schema
- Updated conftest.py with proper async session management

backend/app/routers/auth.py

@@ -58,8 +58,8 @@ async def login(request: LoginRequest, db: AsyncSession = Depends(get_db)):
     await db.flush()
     
     # Generate tokens
-    access_token = create_access_token(str(user.id))
-    refresh_token = create_refresh_token(str(user.id))
+    access_token = create_access_token(str(user.id), user.privlevel or "User")
+    refresh_token = create_refresh_token(str(user.id), user.privlevel or "User")
     
     return LoginResponse(
         access_token=access_token,
@@ -92,7 +92,7 @@ async def refresh_token(request: RefreshTokenRequest, db: AsyncSession = Depends
         )
     
     # Generate new access token
-    access_token = create_access_token(str(user.id))
+    access_token = create_access_token(str(user.id), user.privlevel or "User")
     
     return TokenResponse(access_token=access_token)