- [ ] Inspect `backend/server.js` login/register/session code (done: initial read)
- [x] Edit `backend/server.js` to add debug logging for login failures (username lookup + bcrypt match result)
- [x] Restart backend and reproduce login failure
- [ ] Identify whether issue is username mismatch vs password hash mismatch vs DB connection/database selection



