Secure local sign-in works even with zero internet. Default admin must change password on first login.