Remove /api/auth/status from public routes so it receives Authentik headers. Remove logic that was clearing local auth state, which caused the page to show "No autenticado" even when user was authenticated. Now the button only displays session status without modifying the UI state.