Set AUTH_PASSWORD_SHA256 and SESSION_SECRET in .env before first login.
AUTH_PASSWORD_SHA256
SESSION_SECRET
.env