protected operator console

Secret Layer

Email code required. Codes last 5 minutes; trusted devices stay signed in longer.

Allowed email is configurable later via SECRET_LAYER_ALLOWED_EMAILS.