phpcbf auto-fixes: string concatenation spacing, single-line class braces, closing brace placement.
Green phase: AuthenticateUser validates credentials, throws BadRequestException for empty fields, UnauthorizedException for unknown email or wrong password.