Demo UI only. Backend required for real auth + roles.