updated user features and added palette

.env.example

@@ -28,6 +28,7 @@ CSRF_TRUSTED_ORIGINS=http://localhost:5173
 EMAIL_HOST=smtp.example.com
 EMAIL_PORT=587
 EMAIL_HOST_USER=your-email@example.com
+# Do not wrap the password in quotes or backticks
 EMAIL_HOST_PASSWORD=your-app-password
 
 # --- Optional (defaults are usually fine) ---