The merchant_token cookie is httponly, so JS cannot read it via document.cookie. This caused getToken() to return null, redirecting users to login, which then bounced back to dashboard. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>