fix: /auth/me les IAP-header istedenfor session

main.py

@@ -135,10 +135,12 @@ async def auth(request: Request):
 
     @app.get("/auth/me")
     async def me(request: Request):
-        user = request.session.get("user")
-        if not user:
+        email = request.headers.get("x-goog-authenticated-user-email", "")
+        if not email:
             raise HTTPException(status_code=401, detail="Not authenticated")
-        return JSONResponse(user)
+        # IAP sender "accounts.google.com:chris@vauco.no" - vi fjerner prefix
+        clean_email = email.split(":")[-1]
+        return JSONResponse({"email": clean_email, "authenticated": True})
 
     @app.get('/auth/logout')
     async def logout(request: Request):