A login service listens on port 1337 inside your instance (started at instance start; runs as root). The SQLite users table is seeded with random credentials at every start — do not bother guessing passwords.
Bypass authentication as the (randomly named) admin account and the service will print your /flag.