Why: a freshly created account still has must_change_password set, so the seed command returns 403 before Playwright can open the audit workspace. Evidence: a replay of the isolated seed received "forbidden: password setup required" on rdm.project.create. Impact: the seed completes the existing set-password call and logs in again. Browser login still starts from the initial password. Refs: scripts/e2e.sh Co-authored-by: Cursor <cursoragent@cursor.com>