Sign in with the dashboard password (DASHBOARD_PASSWORD from your environment).
Sessions are signed, HttpOnly cookies; state-changing requests require a CSRF token. Login attempts are rate limited.