[Bug]: header auth prompting for a password [v25.2.1]

### Verified issue does not already exist?

- [x] I have searched and found no existing issue

### What happened?

I've gotten actual running with header auth, but I'm still seeing the password prompt on app load. Diving through the issues, it looks like this should not be happening (#2781). Is this a regression, potentially related to the recent work with multi-user, or is there something I am not configuring right?
if I type anything into the password box, it takes me to the same data, and the logs indicate it's accepting my header login.

relevant config:
```
environment:
ACTUAL_LOGIN_METHOD: header
ACTUAL_ALLOWED_LOGIN_METHODS: header
DEBUG: "actual:config,actual-sensitive:config"

```
is there anything obvious missing?

### How can we reproduce the issue?

Launch actual with header auth configured; visit any actual page

### Where are you hosting Actual?

docker

### What browsers are you seeing the problem on?

Safari, Firefox

### Operating System

None