requireAuth() in routeTree.tsx reads isAuthenticated from useSessionStore (Zustand), but SessionProvider only managed state via React context. After login, the Zustand store stayed false, causing protected route guards to redirect to /login even when authenticated.