Unauthenticated administrator access via inherited prototype lookup

Authentication bypass in Tarkov Data Manager 2.0.0 and earlier allows remote attackers to gain administrator access through the login endpoint. The authentication handler reads an attacker-controlled username from a plain object, accepts the inherited proto property as truthy, and loosely equates that object with the supplied string password. No credentials or user interaction are required, and a successful request creates an authenticated administrative session.