- Remove premature auth redirect in unresolved.html fetchUnresolved() - Add /api/setup/ to middleware exempt paths - Unresolved page now loads without auth token (part of setup flow) - Only redirect to login on 401 (expired token) or when all folders resolved