v1.0.4 - Clean start

public_html/api/me.php

@@ -1,5 +1,5 @@
 <?php
-ob_start(); // Buffer any accidental output (PHP errors, notices, etc.)
+ob_start();
 try {
     require_once __DIR__ . '/../../includes/auth.php';
 } catch (Throwable $e) {
@@ -28,5 +28,8 @@ if (!$user) {
     exit;
 }
 
+// Sync session is_admin with DB value — catches admin elevation/demotion
+$_SESSION['is_admin'] = (int)$user['is_admin'];
+
 unset($user['password']);
 echo json_encode(['success' => true, 'user' => $user]);