- Logout now redirects to /auth/login?provider=local instead of / - Dashboard / and /workspace check auth and redirect to login if no session - _get_user_or_redirect() helper added for reusable auth checks - No more fallback admin user on dashboard — explicit login required - Routes without session redirect to login page