Admin password imported from env var, in server.js