Phase 1 fix auth redirect API handling and route issues

app/modules/employees/ui.py

@@ -143,7 +143,8 @@ def _redirect_login():
 
 
 def _redirect_denied():
-    return RedirectResponse(url="/system-settings", status_code=303)
+    from app.core.http_responses import ui_access_denied
+    return ui_access_denied()
 
 
 def _base_ctx(request: Request, db, current_user, **ctx):
@@ -687,6 +688,7 @@ def employee_leave_balance_adjust(request: Request, employee_id: int = Form(...)
         db.close()
 
 
+@router.get("/leaves")
 @router.get("/leave")
 def employee_leave_requests(request: Request, employee_id: int | None = None, status: str = "pending"):
     db = CommonSessionLocal()
@@ -2379,6 +2381,7 @@ def employee_punch_out_submit(
         db.close()
 
 
+@portal_router.get("/leaves")
 @portal_router.get("/leave")
 def employee_self_leave(request: Request):
     db = CommonSessionLocal()