Dashboard login

Use the local secret from APP_AUTH_SECRET.