phpcbf auto-fixes: string concatenation spacing, single-line class braces, closing brace placement.
Green phase: AuthController handles login (authenticate + create session + set cookie), logout (delete session + clear cookie), and me (return user from request attribute).