Middleware only checked for better-auth.session_token but HTTPS uses __Secure-better-auth.session_token, causing all protected routes to redirect to sign-in even when authenticated.
Middleware only checked for better-auth.session_token but HTTPS uses __Secure-better-auth.session_token, causing all protected routes to redirect to sign-in even when authenticated.