Here's my app's access control, the passwords, and a curl command. Go break it

I moved my app's authorization below the application code. Here is the live demo, the passwords, and...