owner only. no registration.
password stored as a hash only. temporary lock after several failed attempts.