== home ==
  FAIL  returns 200 -- got 0
  PASS  is valid UTF-8
  FAIL  declares Arabic RTL
  PASS  has no BOM
  FAIL  renders Arabic headings
  PASS  no raw PHP tags leaked
  PASS  has no HTML errors

== login page ==
  FAIL  returns 200 -- got 0
  PASS  is valid UTF-8
  FAIL  has an email field
  FAIL  has a password field
  FAIL  has a CSRF token
  FAIL  email field renders with no stale value

== session cookie ==
  FAIL  sets a session cookie
  FAIL  cookie is HttpOnly
  FAIL  cookie is SameSite

== redirects ==
  FAIL  unauthenticated /dashboard redirects -- got 0
  FAIL  redirect targets /login -- none

== CSRF ==
  FAIL  POST without a token is refused -- got 0
  FAIL  POST with a wrong token is refused -- got 0
  FAIL  extracted a live token

== errors ==
  FAIL  unknown path is 404 -- got 0
  FAIL  404 renders the error view
  PASS  404 is valid UTF-8
  FAIL  wrong method is 405 -- got 0

== route specificity ==
  PASS  static route beats nothing

---------------------------------------------
7 passed, 19 failed