Operator sign in - staff only, separate from tenant logins.