diff --git a/main.py b/main.py
index 7eea25b..d6ecec6 100644
--- a/main.py
+++ b/main.py
@@ -112,18 +112,21 @@ async def auth(request: Request):
         request.session['user'] = dict(user)
     return RedirectResponse(url='/static/billing-dashboard.html')
 
-@app.get('/auth/me')
-@require_auth
-async def me(request: Request):
-    """Returns the authenticated user's information."""
-    user = request.session.get('user')
-    return JSONResponse(user)
 
-@app.get('/auth/logout')
-async def logout(request: Request):
-    """Clears the user session and logs them out."""
-    request.session.pop('user', None)
-    return RedirectResponse(url='/static/billing-dashboard.html')
+    @app.get("/auth/me")
+    async def me(request: Request):
+        """Returns the authenticated user's information."""
+        user = request.session.get("user")
+        if not user:
+            raise HTTPException(status_code=401, detail="Not authenticated")
+        return JSONResponse(user)
+
+
+    @app.get('/auth/logout')
+    async def logout(request: Request):
+        """Clears the user session and logs them out."""
+        request.session.pop('user', None)
+        return RedirectResponse(url='/static/billing-dashboard.html')
 
 
 # Allowed emails for login