From a142c9388e0f5a762f8ffe9190719ea5ac991efa Mon Sep 17 00:00:00 2001
From: Runar Ingebrigtsen <runar@rin.no>
Date: Fri, 23 Jan 2026 09:16:36 +0100
Subject: [PATCH] moderate completion

---
 docs/TODO.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/TODO.md b/docs/TODO.md
index cd9383c..c1f20b5 100644
--- a/docs/TODO.md
+++ b/docs/TODO.md
@@ -2,7 +2,7 @@
 
 ## Authentication & Authorization
 
-- [x] **Authentication system**
+- [ ] **Authentication system**
   - [x] Sessions controller and views (login/logout)
   - [x] Email/password authentication with session management
   - [x] Login redirects (admin vs regular users)
@@ -16,7 +16,7 @@
   - [ ] Registration via invitation link (acceptance flow)
   - [ ] Token expiry validation (14 days)
   - [ ] Invitation mailer
-- [x] **Authorization & roles**
+- [ ] **Authorization & roles**
   - [x] Role-based access control middleware (Admin::BaseController)
   - [x] Admin permissions enforcement
   - [ ] Contributor permissions enforcement (for entry editing)