# 26-Jul-2026 — protect open Brevo reads and fill contact-us merge fields [ref #317](https://github.com/nbarrett/ngx-ramblers/issues/317)

## [build 795](https://github.com/nbarrett/ngx-ramblers/actions/runs/30218005751) — [commit 3cf8799](https://github.com/nbarrett/ngx-ramblers/commit/3cf879961584d0932058ae4e756550e1258f7eb4)

_____

## What's new

Brevo admin read routes require a signed-in session again. They were left open when the forgot-password flow was moved to the backend (ref #157). Contact Us mail receives the same account address merge fields as other transactional mail. The walk map editor no longer holds unused mail and system config subscriptions.

## At a glance

- Brevo folders, contacts, lists, templates and account reads need a signed-in session
- Contact Us emails get street, town and postcode account merge fields
- Map edit drops unused mail and system config subscriptions