- Login.tsx: Use apiClient.fetch with skipAuth to avoid auth loops - router.go: Skip CSRF validation for /api/login endpoint - hot-dev.sh: Detect encrypted files before generating new key to prevent data loss