feat: add PendingRewardDialog, RewardConfirmDialog, and TaskConfirmDialog components

- Implemented PendingRewardDialog for handling pending reward requests.
- Created RewardConfirmDialog for confirming reward redemption.
- Developed TaskConfirmDialog for task confirmation with child name display.

test: add unit tests for ChildView and ParentView components

- Added comprehensive tests for ChildView including task triggering and SSE event handling.
- Implemented tests for ParentView focusing on override modal and SSE event management.

test: add ScrollingList component tests

- Created tests for ScrollingList to verify item fetching, loading states, and custom item classes.
- Included tests for two-step click interactions and edit button display logic.
- Moved toward hashed passwords.

backend/api/auth_api.py

@@ -6,6 +6,7 @@ from flask import Blueprint, request, jsonify, current_app
 from tinydb import Query
 import os
 import utils.email_sender as email_sender
+from werkzeug.security import generate_password_hash, check_password_hash
 
 from api.utils import sanitize_email
 from config.paths import get_user_image_dir
@@ -47,7 +48,7 @@ def signup():
         first_name=data['first_name'],
         last_name=data['last_name'],
         email=norm_email,
-        password=data['password'],  # Hash in production!
+        password=generate_password_hash(data['password']),
         verified=False,
         verify_token=token,
         verify_token_created=now_iso,
@@ -140,7 +141,7 @@ def login():
 
     user_dict = users_db.get(UserQuery.email == norm_email)
     user = User.from_dict(user_dict) if user_dict else None
-    if not user or user.password != password:
+    if not user or not check_password_hash(user.password, password):
         return jsonify({'error': 'Invalid credentials', 'code': INVALID_CREDENTIALS}), 401
 
     if not user.verified:
@@ -254,7 +255,7 @@ def reset_password():
     if datetime.now(timezone.utc) - created_dt > timedelta(minutes=RESET_PASSWORD_TOKEN_EXPIRY_MINUTES):
         return jsonify({'error': 'Token expired', 'code': TOKEN_EXPIRED}), 400
 
-    user.password = new_password  # Hash in production!
+    user.password = generate_password_hash(new_password)
     user.reset_token = None
     user.reset_token_created = None
     users_db.update(user.to_dict(), UserQuery.email == user.email)