User address endpoints require login (session authentication). Geographic data and store listings are public.
Note: In production, session ID is automatically sent via browser cookies (osessionid). For testing with Swagger UI "Test It" feature, use the X-Cookie header:
