Log in at /login. Legacy fallback requires NEXT_PUBLIC_WEBAPP_ALLOW_LEGACY_USER_ID=1 plus NEXT_PUBLIC_WEBAPP_USER_ID. Use /login or legacy NEXT_PUBLIC_WEBAPP_USER_ID.