Block a user
Document auth endpoints in OpenAPI
Rate limiter returns 500 under load
Dashboard crashes on empty state
Login button misaligned on mobile