This prototype has no real authentication. In production, sign-in would be required and access limited to authorized staff.