phpcbf auto-fixes: string concatenation spacing, single-line class braces, closing brace placement.
Red phase: AuthControllerTest covers login with valid credentials (returns user+cookie), missing email (400), invalid credentials (401), logout (clears cookie, 204), and me (returns user from attribute).