bec7f91566
The auth middleware was intercepting /api/auth/** requests (OAuth callbacks, session management) and returning 401 before Better-Auth could process them. This prevented login when AUTH_DISABLED=false. Co-Authored-By: Paperclip <noreply@paperclip.ing>