feat: sessions, login, default admin user