Internal staff console
Admin sessions require TOTP after first setup.
Required after first-time setup