Frontend was calling /auth/magic-link/request but the backend route is POST /auth/magic-link, causing a 404.