Remove AuthMiddleware, add direct session check in root endpoint only

app/main.py

@@ -25,13 +25,11 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
-# Setup authentication middleware and session management
-# Must be done BEFORE importing routers so middleware order is correct
-from app.auth import setup_auth, AuthMiddleware
+# Setup authentication - session middleware only (no custom middleware)
+from app.auth import setup_auth
 from app.config import settings
 
 setup_auth(app)  # Adds session middleware
-app.add_middleware(AuthMiddleware)  # Protects routes based on auth config
 
 # Import routers AFTER app is created and middleware is configured
 from app.routers import models, datasets, training, system, jobs
@@ -59,10 +57,21 @@ async def login_page():
     from app.auth import get_login_html
     return HTMLResponse(content=get_login_html())
 
-# Root endpoint - serves dashboard
+# Root endpoint - serves dashboard (with auth check)
 @app.get("/", response_class=HTMLResponse)
-async def root():
-    """Serve the main dashboard"""
+async def root(request: Request):
+    """Serve the main dashboard - check auth first if enabled"""
+    # Check if auth is required and user is logged in
+    if settings.APP_PASSWORD:
+        from app.auth import is_authenticated
+        if not is_authenticated(request):
+            # Redirect to login page
+            return HTMLResponse(
+                content='<script>window.location.href="/login";</script>',
+                status_code=302,
+                headers={"location": "/login"}
+            )
+    
     template_path = os.path.join(os.path.dirname(__file__), "templates", "dashboard.html")
     try:
         with open(template_path, 'r') as f: