Secure staff access

Hospital staff login

Tenant staff and NobatFlow HQ use the same session foundation, with separate role checks behind the scenes.