Captain and admin sign-in

Authentication is live-backed. Match scoring, lineup locking, sign-off, and disputes require a signed-in captain.