Forgot password flow is ready for extension through email credentials; admin login uses the seeded admin account.
