Session auth for the unified admin surface. Jason is seeded automatically when an admin password env is present.