Account Access

Use passwords for customer and admin accounts.

Customers sign up with email and password, then verify their email before signing in. Admins use the same password flow, but still require the admin role in `profiles` to access protected routes.