Admin sign-in

Temporary shared password (see hosting docs). Replace with real auth later.