diff --git a/accountforger-video.html b/accountforger-video.html
index e11a73b..e31d57c 100644
--- a/accountforger-video.html
+++ b/accountforger-video.html
@@ -574,9 +574,9 @@
     </div>
 
     <script>
-        // Check authentication
-        if (!sessionStorage.getItem('accountForgerAuth')) {
-            window.location.href = 'index.html';
+        // Zugangsschutz wird serverseitig von Nginx (auth_request) geprueft.
+        // Wenn diese Seite laedt, wurde der Zugang bereits verifiziert.
+
         }
 
         // Video player functionality
diff --git a/js/components.js b/js/components.js
index 3da8b05..976b61e 100644
--- a/js/components.js
+++ b/js/components.js
@@ -395,7 +395,7 @@ const LoginModal = {
         
         try {
             // Validate token via Insights API
-            const response = await fetch('/insights/api/validate-token.php', {
+            const response = await fetch('/insights/api/validate-token', {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json'