Dashboard Login

Session cookie is HttpOnly. Use /setup for first-time password set.