- TemplateResponse now uses (request, name, context) signature for Starlette 0.36+
- Replace per-button hx-headers with global htmx:configRequest token injection in base.html
- Fix JS cookie regex to handle leading semicolons correctly
Tested: login, auth redirect, profile create/view/delete all return correct status codes.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>