fixed a bit of stuff the current but API is broken again for logging in so will be fixing that with the next push

app/api/clues/[clueId]/route.js

@@ -9,38 +9,41 @@ export async function GET(request, { params }) {
   const { clueId } = params;
 
   try {
-    // Verify the user is authenticated
-    const cookieStore = await cookies();
-    const sessionToken = cookieStore.get("next-auth.session-token")?.value;
-
-    if (!sessionToken) {
-      return Response.json(
-        { error: "Unauthorized", clue: null },
-        { status: 401 }
-      );
-    }
-
-    const userData = verifyToken(sessionToken);
-    if (!userData) {
-      return Response.json(
-        { error: "Invalid session", clue: null },
-        { status: 401 }
-      );
-    }
-
-    // Check if the hunt is active
+    // Check if the hunt is active first
     const huntActiveSetting = await queryOne(
       "SELECT value FROM settings WHERE key = 'hunt_active'"
     );
-
     const huntActive = huntActiveSetting && huntActiveSetting.value === "true";
 
+    // Only verify authentication when hunt is not active
     if (!huntActive) {
-      // Return a valid JSON response with clue set to null
-      return Response.json({
-        error: "Hunt is not active",
-        clue: null,
-      });
+      const cookieStore = await cookies();
+      const sessionToken =
+        cookieStore.get("next-auth.session-token")?.value ||
+        cookieStore.get("__Secure-next-auth.session-token")?.value;
+
+      if (!sessionToken) {
+        return Response.json(
+          { error: "Unauthorized", clue: null },
+          { status: 401, headers: { "Content-Type": "application/json" } }
+        );
+      }
+
+      const userData = verifyToken(sessionToken);
+      if (!userData) {
+        return Response.json(
+          { error: "Invalid session", clue: null },
+          { status: 401, headers: { "Content-Type": "application/json" } }
+        );
+      }
+
+      // Admin can see clues even if hunt is not active
+      if (userData.role !== "admin") {
+        return Response.json(
+          { error: "Hunt is not active", clue: null },
+          { headers: { "Content-Type": "application/json" } }
+        );
+      }
     }
 
     // Fetch the specific clue
@@ -49,17 +52,19 @@ export async function GET(request, { params }) {
     if (!clue) {
       return Response.json(
         { error: "Clue not found", clue: null },
-        { status: 404 }
+        { status: 404, headers: { "Content-Type": "application/json" } }
       );
     }
 
-    return Response.json({ clue });
+    return Response.json(
+      { clue },
+      { headers: { "Content-Type": "application/json" } }
+    );
   } catch (error) {
     console.error("Error fetching clue details:", error);
-    // Always return a valid JSON response even on error
     return Response.json(
       { error: "Failed to fetch clue details: " + error.message, clue: null },
-      { status: 500 }
+      { status: 500, headers: { "Content-Type": "application/json" } }
     );
   }
 }