Default: admin / admin123 (run setup.php first if login fails)