Added comments

ref #40

src/controllers/AuthController.ts

@@ -87,6 +87,7 @@ export class AuthController {
 	@ResponseSchema(UsernameOrEmailNeededError)
 	@OpenAPI({ description: "Request a password reset token" })
 	async getResetToken(@Body({ validate: true }) passwordReset: CreateResetToken) {
+		//This really shouldn't just get returned, but sent via mail or sth like that. But for dev only this is fine.
 		return { "resetToken": await passwordReset.toResetToken() };
 	}