public function login(): array
    {
        $data = $this->validate([
            'email' => 'required|email',
            'password' => 'required|min:6',
            'remember' => ''
        ]);
        
        try {
            $success = $this->auth->attempt($data['email'], $data['password'], !empty($data['remember']));
            
            if (!$success) {
                return $this->error('Credenziali non valide', 401);
            }
            
            $user = $this->auth->user();
            $token = $this->auth->createApiToken('web-login');
            
            return $this->success([
                'user' => $this->sanitizeUser($user),
                'token' => $token
            ], 'Login effettuato con successo');
        } catch (\Exception $e) {
            return $this->error($e->getMessage(), 401);
        }
    }