V25 DISCORD OAUTH CHECK
PHP syntax errors: 0
Missing local refs: 0
OAuth state/CSRF: enabled
Session ID regeneration after login: enabled
Discord secret exposed to JS: NO
DB account auto-creation: disabled until users schema is confirmed