Let admins skip SMS on user, class, and invoice actions, and let users change their own password with the current one.
Express/MongoDB backend with JWT auth, RBAC, S3 uploads, notifications, and scheduled jobs.