Admin sign-in

This protects admin API access. Your key is stored in sessionStorage for this browser session.