Redirect to login instead of 401 on unauthorized/not-fresh sessions (Flask-Login handlers)

Redirect-on-expiry: fresh required on /api/status and injected heartbeat in index.html responses to auto-redirect to /login when session expires

Security/session hardening: absolute 2-min expiry (SESSION_REFRESH_EACH_REQUEST=False), disable remember, anti-autofill login form, no-store cache on protected routes, clear session on logout

Enforce 2-minute session expiry: set PERMANENT_SESSION_LIFETIME=120s via timedelta and disable remember-login

Adjust session cookie SameSite=None and set PERMANENT_SESSION_LIFETIME=120s for testing

Use SameSite=None for session/remember cookies (iframe compatibility on Spaces)

Fix login redirect loop with improved session handling and debugging

Fix login redirect loop with improved session persistence

Fix Flask-Session permission error by using temp directory

Fix login redirect loop with Flask-Session and improved routing

Fix login redirect loop by improving login and serve_react functions

Fix routing conflict causing redirect loop after login

Update api.py

Fix authentication issues with Flask-Login

Fix login redirect issue and enhance session management

Fix login functionality and translate UI to English

Add login feature with Flask-Login

Copy files from hf-space to vision_llm_agent