User sign-in

Pilot build. One shared ops account; set OPS_PASSWORD in the environment.