Private operator access
Single-operator access. The token is the value of AUTH_TOKEN. Magic-link sign-in replaces this later.