Staff sign-in

Access to admin routes is restricted to authenticated staff accounts.