token variable was undefined in loadCrawlerStatus() scope (only declared inside IIFE auth guard, not globally). All API calls silently failed with 401. Fix: read token from localStorage at start of function, consistent with getAuthHeaders() pattern used in all other load functions.