fix: remove sensitive cookie data from sample user configuration

[Ayaz-Microsoft]

Purpose

This pull request contains a minor update to the troubleshooting documentation and a small change to a sample user data file. The documentation improvement clarifies the steps required when updating immutable VM properties, while the sample user file has a single-line modification.

Documentation update:

• Clarified the recommended steps for resolving the "PropertyChangeNotAllowed" error in the docs/TroubleShootingSteps.md file by removing the suggestion to set new credentials before redeployment, focusing instead on deleting the deployment and redeploying with new credentials. This helps prevent confusion about changing immutable VM properties.

Sample data update:

• Removed the Cookie header line from the src/backend/auth/sample_user.py file, likely to avoid exposing sensitive session information in the sample data.

Does this introduce a breaking change?

• Yes
• No

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
auth
sample_user.py	1	0	100%
TOTAL	3055	381	87%

Tests	Skipped	Failures	Errors	Time
886	5 💤	0 ❌	0 🔥	8.490s ⏱️

[Copilot]

Pull request overview

This PR updates troubleshooting guidance and sanitizes a sample auth header payload to avoid including sensitive session cookie data.

Changes:

• Removed an AppServiceAuthSession cookie header from src/backend/auth/sample_user.py sample data.
• Updated PropertyChangeNotAllowed troubleshooting steps in docs/TroubleShootingSteps.md to focus on tearing down and redeploying.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
src/backend/auth/sample_user.py	Removes the Cookie header from the sample request header dictionary to avoid exposing sensitive session data.
docs/TroubleShootingSteps.md	Adjusts the PropertyChangeNotAllowed resolution steps; wording should be aligned with the now-removed “set new credentials” step.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.