Protected dashboard access

Use the operator password configured privately for the live site. This keeps the dashboard internet-accessible but not publicly open.