f03259d443
Cookie path /admin meant the browser never sent it to /api/admin/check (the auth check endpoint), so every check returned unauthenticated. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>