-- Add auth_token and token_expires_at columns to staff table
ALTER TABLE `staff`
ADD COLUMN `auth_token` VARCHAR(255) NULL DEFAULT NULL AFTER `permissions`,
ADD COLUMN `token_expires_at` DATETIME NULL DEFAULT NULL AFTER `auth_token`,
ADD INDEX `idx_auth_token` (`auth_token`);