Admin auth: allow password changing via env vars.
Secure ?refresh=1 with a password.