"That process is included in every request"—yet it's not going through: 10 places where request "checkpoints" don't work as written

"Login verification is included on every screen," "CORS headers are attached to every request via middleware," "There is a ...