Keep the token check on the first line and the new bounded-line request parsing; tests authenticate before sending their requests. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>