Set a password hash using your hosting environment or the private config.local.php file before using the dashboard. See the README. The app remains locked until configured.
config.local.php