<div class="card p-4">
  <div class="text-center mb-4"><h1 class="h3 fw-bold">Ecofina GST Billing</h1><p class="text-muted mb-0">Secure admin login</p></div>
  <% if (error && error.length) { %><div class="alert alert-danger"><%= error[0] %></div><% } %>
  <form method="post" action="<%= url('/login') %>">
    <div class="mb-3"><label class="form-label">Email</label><input type="email" name="email" class="form-control" required autofocus></div>
    <div class="mb-3"><label class="form-label">Password</label><input type="password" name="password" class="form-control" required></div>
    <button class="btn btn-primary w-100">Login</button>
  </form>
  <div class="small text-muted mt-3">Default: admin@ecofina.local / Admin@12345</div>
</div>
