Admin login pasword changes

tests/conftest.py

@@ -70,6 +70,7 @@ os.environ["ACTIVE_BRANDS"] = ""
 # Auth is set unconditionally (not setdefault): the suite asserts on the real
 # guards, so it must never inherit a developer's AUTH_ENABLED=false.
 os.environ["AUTH_ENABLED"] = "true"
+os.environ["AUTH_ALLOW_ANY_LOGIN"] = "false"
 os.environ["AUTH_SECRET_KEY"] = "test-secret-key-not-for-production-use-at-all"
 os.environ["AUTH_ADMIN_USERNAME"] = "admin"
 os.environ["AUTH_ADMIN_PASSWORD_HASH"] = _hash(TEST_ADMIN_PASSWORD)