Admin login

Tip: after deployment, restrict access to /admin/ by IP/VPN where possible.