punch-card-api admin
Admin password
Sign in
Session cookie is HttpOnly + Secure + SameSite=Strict; 8-hour TTL.