diff --git a/web/src/lib/api.ts b/web/src/lib/api.ts
index ef73ced..bf75f42 100644
--- a/web/src/lib/api.ts
+++ b/web/src/lib/api.ts
@@ -6,20 +6,13 @@ interface FetchOptions extends RequestInit {
 export async function fetchApi(endpoint: string, options: FetchOptions = {}): Promise<Response> {
     const { params = {}, token, ...fetchOptions } = options;
 
-    const url = new URL(`${window.location.origin}/api${endpoint}`);
-    Object.keys(params).forEach((key) => url.searchParams.append(key, params[key]));
+    const base = `/api${endpoint}`;
+    const query = new URLSearchParams(params).toString();
+    const url = query ? `${base}${base.includes("?") ? "&" : "?"}${query}` : base;
 
-    const init = {
-        headers: {
-            ...fetchOptions.headers,
-        },
-        ...fetchOptions,
-    };
+    const init: RequestInit = { ...fetchOptions };
     if (token) {
-        init.headers = {
-            ...init.headers,
-            Authorization: `Basic ${token}`,
-        };
+        init.headers = { ...init.headers, Authorization: `Basic ${token}` };
     }
     return await fetch(url, init);
 }
diff --git a/web/src/lib/components/LabeledCheckbox.svelte b/web/src/lib/components/LabeledCheckbox.svelte
index 0e0b80a..69f8c8c 100644
--- a/web/src/lib/components/LabeledCheckbox.svelte
+++ b/web/src/lib/components/LabeledCheckbox.svelte
@@ -13,19 +13,17 @@
 </script>
 
 <Checkbox.Root id={checkboxId} aria-labelledby={labelId} bind:checked class="flex cursor-pointer items-center justify-between gap-2 btn-ghost px-2 py-1">
-    {#snippet children({ checked })}
-        <Label.Root id={labelId} for={checkboxId} class="cursor-pointer">
-            {labelText}
-        </Label.Root>
-        <div
-            class="relative size-5 rounded-sm border bg-neutral transition-colors ease-in-out data-[state=checked]:bg-primary"
+    <Label.Root id={labelId} for={checkboxId} class="cursor-pointer">
+        {labelText}
+    </Label.Root>
+    <div
+        class="relative size-5 rounded-sm border bg-neutral transition-colors ease-in-out data-[state=checked]:bg-primary"
+        data-state={checked ? "checked" : "unchecked"}
+    >
+        <span
+            class="absolute top-1/2 left-1/2 iconify size-4 -translate-x-1/2 -translate-y-1/2 bg-white opacity-0 transition-opacity ease-in-out octicon--check-16 data-[state=checked]:opacity-100"
+            aria-hidden="true"
             data-state={checked ? "checked" : "unchecked"}
-        >
-            <span
-                class="absolute top-1/2 left-1/2 iconify size-4 -translate-x-1/2 -translate-y-1/2 bg-white opacity-0 transition-opacity ease-in-out octicon--check-16 data-[state=checked]:opacity-100"
-                aria-hidden="true"
-                data-state={checked ? "checked" : "unchecked"}
-            ></span>
-        </div>
-    {/snippet}
+        ></span>
+    </div>
 </Checkbox.Root>
diff --git a/web/src/lib/components/PatchesStats.svelte b/web/src/lib/components/PatchesStats.svelte
index d88a556..5408b4b 100644
--- a/web/src/lib/components/PatchesStats.svelte
+++ b/web/src/lib/components/PatchesStats.svelte
@@ -73,7 +73,7 @@
 </script>
 
 <div class="flex w-full flex-1 flex-col">
-    {#if !data?.total}
+    {#if !data}
         <div class="flex h-full flex-col items-center justify-center">
             <span class="mb-2">Loading statistics...</span>
             <Spinner />
@@ -111,8 +111,15 @@
                     Time Spent: {Duration.fromISO(data.timeSpent).toHuman()}
                 </span>
             </div>
-            <div class="h-4 w-full overflow-hidden rounded-full shadow">
-                <div class="flex h-full w-full bg-gray-200 dark:dark:bg-white/20">
+            <div
+                class="h-4 w-full overflow-hidden rounded-full shadow"
+                role="progressbar"
+                aria-label="Patch progress"
+                aria-valuemin={0}
+                aria-valuemax={data.total}
+                aria-valuenow={data.done}
+            >
+                <div class="flex h-full w-full bg-gray-200 dark:bg-white/20">
                     <div class="h-full bg-green-500 dark:bg-green-800" style="width: {getProgressPercentage(data.done, data.total)}%"></div>
                     <div class="h-full bg-orange-500 dark:bg-orange-800" style="width: {getProgressPercentage(data.wip, data.total)}%"></div>
                     <div class="h-full bg-yellow-500 dark:bg-yellow-800" style="width: {getProgressPercentage(data.available, data.total)}%"></div>
diff --git a/web/src/lib/components/PatchesTable.svelte b/web/src/lib/components/PatchesTable.svelte
index de9e6f3..b781183 100644
--- a/web/src/lib/components/PatchesTable.svelte
+++ b/web/src/lib/components/PatchesTable.svelte
@@ -67,6 +67,3 @@
 <div class="flex w-full flex-1">
     <AgGrid {gridOptions} rowData={data} {modules} {gridClass} />
 </div>
-
-<style>
-</style>
diff --git a/web/src/lib/components/settings-popover/SettingsPopoverGroup.svelte b/web/src/lib/components/settings-popover/SettingsPopoverGroup.svelte
index a8a2517..415b112 100644
--- a/web/src/lib/components/settings-popover/SettingsPopoverGroup.svelte
+++ b/web/src/lib/components/settings-popover/SettingsPopoverGroup.svelte
@@ -1,6 +1,3 @@
-<script module>
-</script>
-
 <script lang="ts">
     import { useId, Label } from "bits-ui";
     import type { Snippet } from "svelte";
@@ -12,17 +9,11 @@
 
     let { children, title }: Props = $props();
 
-    let groupId = useId();
-    let labelId = useId();
+    const groupId = useId();
+    const labelId = useId();
 </script>
 
-{#snippet renderChildren()}
-    {#if children}
-        {@render children()}
-    {/if}
-{/snippet}
-
 <div id={groupId} aria-labelledby={labelId} class="flex flex-col" role="group">
     <Label.Root id={labelId} for={groupId} class="px-2 pt-4 pb-1 font-semibold">{title}</Label.Root>
-    {@render renderChildren()}
+    {@render children?.()}
 </div>
diff --git a/web/src/lib/index.svelte.ts b/web/src/lib/index.svelte.ts
index d500457..b04d908 100644
--- a/web/src/lib/index.svelte.ts
+++ b/web/src/lib/index.svelte.ts
@@ -53,9 +53,9 @@ export class PatchRouletteState {
             return;
         }
 
-        const patchResponse = await fetchApi(`/get-all-patches?minecraftVersion=${mcVersion}`, {
+        const patchResponse = await fetchApi(`/get-all-patches?minecraftVersion=${encodeURIComponent(mcVersion)}`, {
             method: "GET",
-            token: localStorage.getItem("token")!,
+            token: token.value ?? undefined,
         });
 
         if (patchResponse.ok) {
@@ -64,9 +64,9 @@ export class PatchRouletteState {
             alert("Failed to fetch patches. Please try again.");
         }
 
-        const statsResponse = await fetchApi(`/stats?minecraftVersion=${mcVersion}`, {
+        const statsResponse = await fetchApi(`/stats?minecraftVersion=${encodeURIComponent(mcVersion)}`, {
             method: "GET",
-            token: localStorage.getItem("token")!,
+            token: token.value ?? undefined,
         });
 
         if (statsResponse.ok) {
diff --git a/web/src/lib/theme.svelte.ts b/web/src/lib/theme.svelte.ts
index af1fd00..d9015f3 100644
--- a/web/src/lib/theme.svelte.ts
+++ b/web/src/lib/theme.svelte.ts
@@ -18,6 +18,7 @@ function initialTheme() {
     return "auto";
 }
 
+// Module state is safe here only because the app is fully prerendered; revisit if SSR is introduced.
 let theme: Theme = $state(initialTheme());
 
 const prefersDark = new MediaQuery("prefers-color-scheme: dark");
diff --git a/web/src/routes/+page.svelte b/web/src/routes/+page.svelte
index 20fe11c..53a8e67 100644
--- a/web/src/routes/+page.svelte
+++ b/web/src/routes/+page.svelte
@@ -33,23 +33,15 @@
         }
     }
 
-    async function handleVersionSelect(event: Event) {
-        instance.selectedVersion = (event.target as HTMLSelectElement).value;
-        if (instance.selectedVersion === "" || instance.selectedVersion === null) {
-            return;
-        } else if (instance.selectedVersion) {
-            await instance.onVersionSelect((event.target as HTMLSelectElement).value);
+    function handleVersionSelect() {
+        if (instance.selectedVersion) {
+            instance.onVersionSelect(instance.selectedVersion);
         }
     }
 
     onMount(async () => {
         token.value = localStorage.getItem("token");
 
-        if (token.value === null) {
-            await goto(resolve("/login"));
-            return;
-        }
-
         await loadMinecraftVersions();
 
         if (minecraftVersions.length > 0) {
@@ -92,6 +84,7 @@
             <button
                 class="flex items-center justify-center rounded-sm btn-ghost px-2 py-1 text-primary data-[active=true]:btn-ghost-visible"
                 data-active={currentView === view}
+                aria-pressed={currentView === view}
                 onclick={() => (currentView = view)}
             >
                 {capitalizeFirstLetter(view)}
diff --git a/web/src/routes/+page.ts b/web/src/routes/+page.ts
new file mode 100644
index 0000000..0cc807f
--- /dev/null
+++ b/web/src/routes/+page.ts
@@ -0,0 +1,9 @@
+import { browser } from "$app/environment";
+import { resolve } from "$app/paths";
+import { redirect } from "@sveltejs/kit";
+
+export function load() {
+    if (browser && localStorage.getItem("token") === null) {
+        redirect(307, resolve("/login"));
+    }
+}
diff --git a/web/src/routes/login/+page.svelte b/web/src/routes/login/+page.svelte
index 9cfb5de..bdd2bbf 100644
--- a/web/src/routes/login/+page.svelte
+++ b/web/src/routes/login/+page.svelte
@@ -1,16 +1,8 @@
 <script lang="ts">
     import Login from "./Login.svelte";
-    import { onMount } from "svelte";
     import { goto } from "$app/navigation";
     import { resolve } from "$app/paths";
 
-    onMount(() => {
-        const token = localStorage.getItem("token");
-        if (token) {
-            onLogin();
-        }
-    });
-
     function onLogin() {
         goto(resolve("/"));
     }
diff --git a/web/src/routes/login/+page.ts b/web/src/routes/login/+page.ts
new file mode 100644
index 0000000..d1d4805
--- /dev/null
+++ b/web/src/routes/login/+page.ts
@@ -0,0 +1,9 @@
+import { browser } from "$app/environment";
+import { resolve } from "$app/paths";
+import { redirect } from "@sveltejs/kit";
+
+export function load() {
+    if (browser && localStorage.getItem("token") !== null) {
+        redirect(307, resolve("/"));
+    }
+}
diff --git a/web/src/routes/login/Login.svelte b/web/src/routes/login/Login.svelte
index 7969229..d54977d 100644
--- a/web/src/routes/login/Login.svelte
+++ b/web/src/routes/login/Login.svelte
@@ -45,6 +45,7 @@
             type="text"
             id="username"
             name="username"
+            autocomplete="username"
             class="w-full rounded border px-3 py-2 focus:ring-2 focus:ring-primary focus:outline-none"
             bind:value={username}
         />
@@ -55,6 +56,7 @@
             type="password"
             id="password"
             name="password"
+            autocomplete="current-password"
             class="w-full rounded border px-3 py-2 focus:ring-2 focus:ring-primary focus:outline-none"
             bind:value={password}
         />