Secure read-only admin login

Set PORTAL_ADMIN_USER and PORTAL_ADMIN_PASSWORD in .env.