# Skip check for these routes (always public)
        PUBLIC_ROUTES = [
            '/beta-access',  # Beta access form
            '/api/capture-lead',  # Lead capture must work
            '/static',  # Static files
            '/health',  # Health check
            '/clear-beta',  # For testing
            '/login',  # Allow login page
            '/logout',  # Allow logout
            '/register',  # Allow registration during beta
        ]