diff --git a/VERSION b/VERSION
index 297d0c7..b401d59 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.3.11-beta
+0.3.12-beta
diff --git a/public/js/app.js b/public/js/app.js
index 33db8f5..70e1180 100644
--- a/public/js/app.js
+++ b/public/js/app.js
@@ -79,10 +79,11 @@ try{
 
 applyI18n();
 updateEmptyHint();
-/* sessie herstellen: geldig servertoken? dan opnieuw inloggen zonder wachtwoord */
+/* sessie herstellen: de HttpOnly session-cookie (niet leesbaar door JS, dus
+   geen client-side token-check meer mogelijk of nodig) gaat vanzelf mee met
+   dit verzoek - een geldige sessie levert de gebruiker op, anders 401 (gast) */
 (async function(){
   updateBoardsUI();
-  if(!TOKEN) return;
   try{
     const me = await api("/auth/me");
     currentUser = me.user;
diff --git a/public/js/core.js b/public/js/core.js
index 7f71d1a..a19c261 100644
--- a/public/js/core.js
+++ b/public/js/core.js
@@ -2,7 +2,7 @@
 "use strict";
 /* version — shown until /api/version resolves (or if the fetch fails, e.g. offline).
    Kept in sync by hand with the VERSION file at the repo root on every release. */
-const VERSION = "0.3.11-beta";
+const VERSION = "0.3.12-beta";
 (function(){
   const tag = document.getElementById("verTag");
   tag.textContent = "v"+VERSION;