Add authentication for update/delete endpoints

routes/programs.py

@@ -1,6 +1,6 @@
 from flask import Blueprint, render_template, request, redirect, url_for, current_app
 from extensions import db
-# from flask_login import login_required, current_user # Add if authentication is needed
+from flask_login import login_required, current_user 
 from jinja2_fragments import render_block # Import render_block
 
 programs_bp = Blueprint('programs', __name__, url_prefix='/programs')
@@ -8,7 +8,7 @@ programs_bp = Blueprint('programs', __name__, url_prefix='/programs')
 from flask import flash # Import flash for displaying messages
 
 @programs_bp.route('/create', methods=['GET', 'POST'])
-# @login_required # Uncomment if login is required
+@login_required
 def create_program():
     if request.method == 'POST':
         program_name = request.form.get('program_name', '').strip()
@@ -157,7 +157,7 @@ def list_programs():
 
 
 @programs_bp.route('/<int:program_id>/delete', methods=['DELETE'])
-# @login_required # Add authentication if needed
+@login_required
 def delete_program(program_id):
     """Deletes a workout program and its associated sessions/assignments."""
     try: