Fix CSRF: use single worker with threads

start.sh

@@ -19,4 +19,6 @@ with app.app_context():
 "
 
 echo "Starting gunicorn server..."
-exec gunicorn run:app --bind 0.0.0.0:7860 --workers 2 --timeout 120
+# Use 1 worker to avoid CSRF token mismatch between workers
+# Use threads instead for concurrency
+exec gunicorn run:app --bind 0.0.0.0:7860 --workers 1 --threads 4 --timeout 120