Staff Login

Discord OAuth is stubbed for a later release. Right now the staff panel is open (`auth_enabled = 0`).

When you are ready: create a Discord application, fill client ID/secret in config, set the redirect to /staff/callback.php, then enable auth in Settings.