Prototype login. Production requires real authentication (e.g. Supabase Auth) before launch.