Authentification requise pour le dashboard
// credentials are read from .env.local · session signed with HS256