IPv4-mapped IPv6 addresses (::ffff:192.168.1.x) are now unwrapped to plain IPv4 so the session map key from portal auth matches the proxy lookup key. All RemoteAddr extraction points go through normalizeIP(). Debug logging on sessionMap Set/Get/Delete traces the exact IP being stored vs looked up — visible with --log-level=debug. Also includes: logElementHidden now logs which CSS selectors were applied, and mergeElementHidingCSS returns the selector list.