reason: Check implementation against backend architecture and expected core modules.


reason: Verify backend file placement and layering.


reason: Verify schema/DAO choices for login and roles.


reason: Verify validation, authentication failure, and unauthorized access handling.


reason: Verify logging/error tracing expectations where authentication code warrants it.


reason: Verify backend quality and layer boundary constraints.


reason: Verify JSP form and fragment conventions.


reason: Ensure SPA/hook conventions were not introduced.


reason: Verify display contracts and validation boundaries.