Fix: eagerload series.sets i admin og API (MissingGreenlet i async mode)

backend/app/routers/auth.py

@@ -1,5 +1,5 @@
 from fastapi import APIRouter, Depends, HTTPException, status, Request
-from fastapi.responses import HTMLResponse, RedirectResponse
+from fastapi.responses import HTMLResponse, JSONResponse, RedirectResponse
 from fastapi.templating import Jinja2Templates
 from sqlalchemy import select
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -7,7 +7,7 @@ from pydantic import BaseModel
 
 from ..database import get_db
 from ..models import User
-from ..auth import verify_password, create_token, hash_password, require_admin
+from ..auth import verify_password, create_token, hash_password
 
 router = APIRouter()
 templates = Jinja2Templates(directory="app/templates")
@@ -37,7 +37,7 @@ async def login(data: LoginForm, db: AsyncSession = Depends(get_db)):
         raise HTTPException(status_code=401, detail="Forkert brugernavn eller adgangskode")
 
     token = create_token(user.username, user.role)
-    resp = RedirectResponse(url="/", status_code=302)
+    resp = JSONResponse(content={"ok": True, "redirect": "/"})
     resp.set_cookie(
         key="token", value=token, httponly=True, max_age=30 * 24 * 3600,
         samesite="lax"
@@ -47,41 +47,6 @@ async def login(data: LoginForm, db: AsyncSession = Depends(get_db)):
 
 @router.post("/api/logout")
 async def logout():
-    resp = RedirectResponse(url="/login", status_code=302)
+    resp = JSONResponse(content={"ok": True, "redirect": "/login"})
     resp.delete_cookie("token")
     return resp
-
-
-# --- Admin-only: user management ---
-
-@router.post("/api/admin/users")
-async def create_user(
-    data: CreateUserForm,
-    db: AsyncSession = Depends(get_db),
-    _: User = Depends(require_admin),
-):
-    exists = await db.execute(select(User).where(User.username == data.username))
-    if exists.scalar_one_or_none():
-        raise HTTPException(status_code=400, detail="Bruger findes allerede")
-
-    user = User(
-        username=data.username,
-        password_hash=hash_password(data.password),
-        role=data.role,
-    )
-    db.add(user)
-    await db.commit()
-    return {"ok": True, "username": user.username, "role": user.role}
-
-
-@router.get("/api/admin/users")
-async def list_users(
-    db: AsyncSession = Depends(get_db),
-    _: User = Depends(require_admin),
-):
-    result = await db.execute(select(User).order_by(User.username))
-    users = result.scalars().all()
-    return [
-        {"id": u.id, "username": u.username, "role": u.role, "created_at": str(u.created_at)}
-        for u in users
-    ]