Legacy demo accounts may still use old plaintext passwords until the first successful login upgrades them to a hash.
Info
Role and module access are managed locally in this demo.