- Add EnsureFrontendRequestsAreStateful to api middleware stack - Create config/sanctum.php with cts-work.test as stateful domain - Fixes 'Unauthenticated' error on SongDB and other API-backed pages