Secure Admin Login

SOC access is logged, session-hardened and role controlled.

Default admin must be changed immediately after first login.