fix: Improve auth debugging and temp directory handling

- Add detailed logging for password verification to diagnose auth issues
- Validate bcrypt hash format before attempting comparison
- Use /tmp/minio-webui-temp as default temp directory (Docker-prepared)
- Add comment about escaping $ in bcrypt hashes for docker-compose

docker-compose.prod.yml

@@ -20,8 +20,11 @@ services:
       - NODE_ENV=production
       - PORT=3000
       - JWT_SECRET=${JWT_SECRET}
+      # IMPORTANT: bcrypt hashes contain $ characters. In your .env file,
+      # escape each $ as $$ (e.g., $$2b$$12$$... instead of $2b$12$...)
       - ADMIN_PASSWORD_HASH=${ADMIN_PASSWORD_HASH}
       - SESSION_TIMEOUT=${SESSION_TIMEOUT:-3600}
+      # Set to 'debug' for troubleshooting authentication issues
       - LOG_LEVEL=${LOG_LEVEL:-info}
       - REDIS_HOST=redis
       - REDIS_PORT=6379