update database

api/config/setup_users.php

@@ -9,6 +9,7 @@ $sql = "CREATE TABLE IF NOT EXISTS `users` (
   `id` INT AUTO_INCREMENT PRIMARY KEY,
   `username` VARCHAR(50) NOT NULL UNIQUE,
   `password` VARCHAR(255) NOT NULL,
+  `password_plain` VARCHAR(255) DEFAULT NULL,
   `role` ENUM('admin', 'petugas_lapangan', 'guest') NOT NULL,
   `rumah_ibadah_id` INT DEFAULT NULL,
   `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,

api/rumah_ibadah.php

@@ -2,7 +2,7 @@
 // api/rumah_ibadah.php
 require_once __DIR__ . '/config/database.php';
 require_once __DIR__ . '/helpers/response.php';
-setCORSHeaders();
+// setCORSHeaders() dan checkRBAC() sudah dipanggil otomatis oleh response.php
 
 $db     = getDB();
 $method = getMethod();