Admin sign-in

Operators only — the terminal kiosk stays public.