Security

Decorators in modules/webutils.py enforce access control.

• @login_required: Restricts routes to authenticated users by checking user_id in the session.
• @project_access_required: Restricts project data to its owner. Resolves project_name from route params, query args, or JSON payloads.