- authMiddleware no longer logs token expiry as an error; only tampered
or malformed tokens (genuinely suspicious) trigger logger.error
- fetchJson clears elysium_token and elysium_save_signature from
localStorage and redirects to / on any 401, so players with expired
sessions see the login page instead of a stuck error screen