@improper_input_validation_1.route('/labs/improper_input_validation_1/auth', methods=['GET', 'POST'])
def auth():
    login = request.values.get('login')
    password = request.values.get('password')

    user = get_user_by_login_and_pass(login, password)
    if user is not None:
        token = uuid.uuid4().hex
        tokens.update({token: login})
        return jsonify({'token': token})
    else:
        return jsonify({'error': 'Invalid credentials'})