v1 staff protection uses a simple server-validated password gate. It is intentionally limited and can be upgraded later to proper authentication.