Studio access

Sign in to the admin gateway

Local mock mode uses a signed httpOnly session cookie to protect the studio and admin APIs.

Set ADMIN_PASSWORD and ADMIN_SESSION_SECRET before using the admin studio.