Harden admin security controls

api/config.local.example.php

@@ -0,0 +1,5 @@
+<?php
+// Copy this file to api/config.local.php on the server and replace the value.
+// Generate a hash with generate_password.php or:
+// php -r "echo password_hash('your-strong-password', PASSWORD_DEFAULT);"
+define('ADMIN_PASSWORD_HASH', '$2y$10$replace_with_your_generated_hash');