STRICT LOCATION-TOKEN LOGIN FILTER
==================================

Changed behavior
----------------
- admin_city login: the dashboard, strategic board, live refresh, dispatch lists,
  management lists, and city-admin agent map only show rows whose city token matches
  the authenticated admin user's city value.
- admin_national login: the same screens only show rows whose country token matches
  the authenticated admin user's country value.
- Missing city/country admin token: the scoped screens intentionally return an empty
  view. They no longer fall back to showing all records.
- Montréal coordinates are no longer accepted as a runtime display fallback. Rows
  must have an explicit city token in the database.

AwardSpace installation
-----------------------
1. Upload the full patched project files.
2. Select the Homeless database in phpMyAdmin.
3. Run sql/06_location_token_scope.sql once.
4. Edit and execute the two commented UPDATE users examples near the end of that
   script using your real city-admin and national-admin email addresses.
5. Open public/source_login.php and test each user. The selector now displays the
   configured country and city tokens beside each user.

Multiple tokens
---------------
The PHP scope accepts one token or several tokens separated by commas, semicolons,
pipes, or new lines. Example: Montreal|Laval. Matching ignores case and accents.