Admin sign-in

Restricted area — every action is audit-logged.