Authenticated ✅ — open /sync or /status