Medusa v2 Admin API Returns 401: The Five Real Causes (2026)
POST /auth/user/emailpass returns 200, GET /admin/users/me returns 401. The five real causes: actor_type wrong, secure-cookie blocked on localhost, NGINX stripping cookies, CORS misconfig, and publishable keys on admin routes.