# Setup Notes

## V6 improvements
- Login page sudah ada
- Demo token helper dipakai frontend agar alur fetch lebih kebayang
- Contacts page sudah punya form skeleton + list fetch
- Auth guard backend sudah return unauthorized kalau header tidak ada

## Next recommended step
- Simpan token beneran via cookie/session
- Login form submit beneran
- Contacts form POST beneran
- JWT verification real, bukan check header doang