A hidden authentication route in Tenda router firmware shows how a device can appear to enforce one login while quietly accepting another, undocumented path to admin control.