fix: add cookie-parser middleware to fix 403 on protected routes, add autocomplete to login

api/server.js

@@ -10,8 +10,15 @@ require('dotenv').config();
 const app = express();
 const port = process.env.PORT || 4001;
 
-app.use(cors({ origin: 'http://localhost:4000', credentials: true }));
+const allowedOrigins = [
+  'http://localhost:4000',
+  'https://qr.houseofwebsites.ai',
+  process.env.FRONTEND_URL
+].filter(Boolean);
+
+app.use(cors({ origin: allowedOrigins, credentials: true }));
 app.use(express.json());
+app.use(cookieParser());
 
 // Routes
 const authRoutes = require('./routes/auth');

client/src/app/login/page.tsx

@@ -70,6 +70,7 @@ export default function LoginPage() {
                 onChange={e => setEmail(e.target.value)}
                 className="block w-full px-4 py-3 bg-[#1a1a1a] border border-gray-700 rounded-xl text-white placeholder-gray-500 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:border-transparent transition-all"
                 placeholder="admin@ckqr.com"
+                autoComplete="username"
               />
             </div>
 

client/src/app/register/page.tsx

@@ -63,6 +63,7 @@ export default function RegisterPage() {
                 onChange={e => setEmail(e.target.value)}
                 className="block w-full px-4 py-3 bg-[#1a1a1a] border border-gray-700 rounded-xl text-white placeholder-gray-500 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:border-transparent transition-all"
                 placeholder="you@company.com"
+                autoComplete="username"
               />
             </div>