Sprint Planning Decisions (extracted from email thread)

Re: Re: Re: Sprint 14 Planning — Feb 28, 2026

## Authentication Changes

We need to migrate from JWT to session tokens for web clients. This is mandatory for Sprint 14. Sarah mentioned this needs to happen before the mobile launch — Jake agreed in standup.

After the migration is complete, we should deprecate the JWT endpoint, but give a 2 week grace period.

## Database

Tom said the current index performance is causing timeout issues (see JIRA-4521). We MUST upgrade PostgreSQL from 14 to 16 before March 15. Important: we must NOT run both database versions simultaneously during migration.

## Deferred

Caching layer discussion pushed to Sprint 15 per Mike's suggestion — not enough bandwidth right now.
