`jill-website/CHANGES2.md`

7 lines
Round-2 fix pass complete.

Changed [views/admin.ejs](/Users/stevestudio2/Projects/jill-website/views/admin.ejs:414) to remove the three hardcoded `admin:admin123` Basic Auth headers from admin API calls and use same-origin credentials instead.

Created [CHANGES2.md](/Users/stevestudio2/Projects/jill-website/CHANGES2.md:1) with applied fixes and deferred items.

No tests, installs, git commands, protected paths, or package/schema changes were touched, per constraints.