- Fix Stalwart probe and API routes for OAuth by passing Bearer token and JMAP headers from the client-side auth store - Show only App Passwords and Email Client Setup sections for OAuth users, hiding Password Change, Display Name, TOTP, and Encryption - Skip principal/crypto API fetches for OAuth to avoid 403 errors - Add Email Client Setup section with copyable JMAP username Made-with: Cursor