Admin sign in

Use ADMIN_PASSWORD from .env.local (it overrides .env when both exist).