Admin access

For the Handii team only.

The passcode is set as the ADMIN_PASSCODE environment variable on the server — it's never exposed in the page source.