- Hold SELECT FOR UPDATE lock within transaction by using tx directly instead of separate WithConn, ensuring mutual exclusion when multiple requests race to verify the same token - Fix "resouce" → "resource" typo in authentication error messages Signed-off-by: Bryan Frimin <bryan@getprobo.com>