02fa9ccde4
- Clarify test expectations for auth-disabled environment - Skip timestamp update test (DB backend dependent) - Document require_admin_access sync/async support - Restore session_secret and external_hostname as required - Add comments explaining validation and security requirements Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>