Automated route-auth tests — confirm every mutating route correctly rejects unauthenticated and cross-user requests.
Automated route-auth tests — confirm every mutating route correctly rejects unauthenticated and cross-user requests.