Admin sign-in

Phase A auth is a shared password. Set ADMIN_PASSWORD in .env.local.