- Add Flask-Login for session management
- First-run setup page creates admin account
- Admin can manage users (create, edit, delete, deactivate)
- User isolation: each user sees only their own data
- CLI commands: reset-admin, create-user, list-users
- Password change functionality
- Role-based access control (admin vs regular user)
