Secure login

Admins can sign in with their admin username. Staff can use their username or email.