staff sign-in

welcome back, baker

sign-in is off until ADMIN_PASSWORD is set on the server.