fix: harden users startup and hashing

src/main.py

@@ -66,9 +66,14 @@ async def lifespan(app: FastAPI) -> AsyncGenerator[None, None]:
 
     app.state.jwt_key_store = jwt_store
     app.state.jwt_keys_scheduler = jwt_scheduler
-    yield
-    await app.state.redis.aclose()
-    logger.info(f'Users service instance ended with id {instance_id}')
+    try:
+        yield
+    finally:
+        sched = getattr(app.state,'jwt_keys_scheduler',None)
+        if sched:
+            sched.shutdown(wait=False)
+        await app.state.redis.aclose()
+        logger.info(f'Users service instance ended with id {instance_id}')
 
 
 app: FastAPI = FastAPI(
@@ -107,7 +112,7 @@ app.add_middleware(
 app.add_middleware(
     CORSMiddleware,
     allow_origins=[],
-    allow_origin_regex='.*',
+    allow_origin_regex=settings.CORS_ALLOW_ORIGIN_REGEX,
     allow_credentials=True,
     allow_methods=['*'],
     allow_headers=['*'],