Staff login

Sandbox password documented in README (not a live secret).