Revert "✨ Backend Auth, CSRF, and Security Headers"

[ebigunso]

Reverts #5

[Copilot]

Pull Request Overview

This PR reverts the authentication, CSRF protection, and security headers feature that was added in PR #5. The changes completely remove the authentication system, returning the API to an unauthenticated state.

• Removes all authentication and session management functionality
• Eliminates CSRF protection for mutating requests
• Removes security headers middleware
• Simplifies test files by removing authentication setup

Reviewed Changes

Copilot reviewed 18 out of 20 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
sleep-api/tests/trends_bars.rs	Removes authentication setup and simplifies server health check
sleep-api/tests/auth_csrf.rs	Completely removes the authentication and CSRF test file
sleep-api/tests/api_sleep.rs	Removes authentication setup from sleep API tests
sleep-api/src/trends.rs	Removes authentication requirement from trends endpoints
sleep-api/src/security/	Removes entire security module including CSRF and headers
sleep-api/src/middleware/	Removes entire middleware module for authentication
sleep-api/src/main.rs	Removes imports for auth, middleware, and security modules
sleep-api/src/lib.rs	Removes public exports for auth, middleware, and security modules
sleep-api/src/config.rs	Removes authentication-related configuration functions
sleep-api/src/auth.rs	Completely removes authentication module
sleep-api/src/app.rs	Removes authentication extractors and login/logout endpoints
sleep-api/Cargo.toml	Updates dependencies removing auth-related features
openapi.yaml	Removes authentication and security documentation
README.md	Removes all authentication and security documentation
.env.example	Removes environment configuration example

[Copilot]

This format! macro change appears to be an unintended side effect of the revert. The original format! with field variable was cleaner and more maintainable than string interpolation.