- Change router.refresh() to router.push('/auth/login') after credentials logout
so users land on the login page instead of the broken current page
- Chain catchTrpcUnauthorized after catchTrpcNotFound in /manage/users/[userId]
layout and security page so unauthenticated API responses redirect to login
instead of crashing with a server error