Block a user
Security: Add password complexity requirements
Security: Move token storage from localStorage to httpOnly cookie
Security: Add authorization checks to controllers
Security: Add rate limiting to auth endpoints
Fix Playwright E2E tests - Alpine container incompatibility
Add unit tests for SvelteKit pages (0% coverage)
Add unit tests for frontend auth store (0% coverage)
Add unit tests for frontend API client (0% coverage)
Improve User model coverage (57.1% → 90%)
Improve AuthController coverage (47.1% → 90%)
Add tests for Role model (0% coverage)
Add tests for remaining controllers (0% coverage)
Add tests for PtoController (0% coverage)
Add tests for HolidayController (0% coverage)
Add tests for AllocationController (0% coverage)
Add tests for ActualController (0% coverage)