Admin password verification
Admin sign-in now shows the configured security challenge and submits its token with the password request. A failed attempt refreshes the challenge before retrying. Authenticator verification still applies before operator actions become available.