Paste the auth key the backend printed at first boot. The deck binds to localhost only — this is defence in depth.

The key lives in your browser's localStorage. Clear it any time by visiting this page and submitting an empty value.