Harden auth cookies and fix native schema for event creation

frontend/src/services/secureToken.service.ts

@@ -49,21 +49,10 @@ class SecureTokenService {
     }
 
     try {
-      // Get the gallery token from localStorage
-      const galleryToken = localStorage.getItem(`gallery_token_${slug}`);
-      if (!galleryToken) {
-        throw new Error('No gallery authentication token found');
-      }
-
-      // Generate new token from backend with explicit auth header
+      // Generate new token from backend – authentication handled via cookies
       const response = await api.post<SecureToken>(
         `/secure-images/${slug}/generate-token`,
-        { photoId, accessType },
-        {
-          headers: {
-            'Authorization': `Bearer ${galleryToken}`
-          }
-        }
+        { photoId, accessType }
       );
 
       const tokenData: SecureToken = {
@@ -190,4 +179,4 @@ if (typeof window !== 'undefined') {
   setInterval(() => {
     secureTokenService.clearExpiredTokens();
   }, 5 * 60 * 1000);
-}
+}