Fix language setting not being saved to database on admin settings page

- Added default_language field to general settings state in SettingsPage
- Replaced LanguageSelector component with simple select dropdown on settings page
- Fixed public settings endpoint to read general_default_language from database
- Language setting now properly saved when clicking Save Settings button
- Setting is correctly used by gallery login page and legal pages

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

backend/server.js

@@ -79,8 +79,22 @@ app.use('/api/auth', authLimiter);
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
+// Middleware to set CORS headers for static files
+const setCorsHeaders = (req, res, next) => {
+  res.header('Access-Control-Allow-Origin', req.headers.origin || '*');
+  res.header('Access-Control-Allow-Credentials', 'true');
+  res.header('Cross-Origin-Resource-Policy', 'cross-origin');
+  next();
+};
+
 // Static file serving for photos (protected)
-app.use('/photos', require('./src/middleware/photoAuth'), express.static(path.join(__dirname, 'storage/events/active')));
+app.use('/photos', require('./src/middleware/photoAuth'), setCorsHeaders, express.static(path.join(__dirname, 'storage/events/active')));
+
+// Static file serving for thumbnails (protected)
+app.use('/thumbnails', require('./src/middleware/photoAuth'), setCorsHeaders, express.static(path.join(__dirname, 'storage/thumbnails')));
+
+// Static file serving for uploads (public - logos, favicons)
+app.use('/uploads', setCorsHeaders, express.static(path.join(__dirname, 'storage/uploads')));
 
 // Health check endpoint
 app.get('/api/health', (req, res) => {
@@ -94,6 +108,8 @@ app.use('/api/gallery', galleryRoutes);
 app.use('/api/admin', adminRoutes);
 app.use('/api/admin/auth', adminAuthRoutes);
 app.use('/api/public/settings', require('./src/routes/publicSettings'));
+app.use('/api/public', require('./src/routes/publicCMS'));
+app.use('/api/images', require('./src/routes/protectedImages'));
 
 // Error handling middleware
 app.use((err, req, res, next) => {