The Next proxy (middleware) 307-redirected every non-/auth path without an 'auth' cookie to /auth, intercepting the (social) group's `/` and all /hz/* routes so the dashboard never rendered and /hz/auth/* + /hz/bff/* were guarded. Bypass '/' and '/hz/*' early (Postiz behavior for its own paths untouched). frontend 1.0.1 -> 1.0.2.