diff --git a/backend/apps/users/__pycache__/admin.cpython-314.pyc b/backend/apps/users/__pycache__/admin.cpython-314.pyc
index 9daed99..0ddf4d2 100644
Binary files a/backend/apps/users/__pycache__/admin.cpython-314.pyc and b/backend/apps/users/__pycache__/admin.cpython-314.pyc differ
diff --git a/backend/apps/users/__pycache__/models.cpython-314.pyc b/backend/apps/users/__pycache__/models.cpython-314.pyc
index f9c8960..13e6b29 100644
Binary files a/backend/apps/users/__pycache__/models.cpython-314.pyc and b/backend/apps/users/__pycache__/models.cpython-314.pyc differ
diff --git a/backend/apps/users/__pycache__/urls.cpython-314.pyc b/backend/apps/users/__pycache__/urls.cpython-314.pyc
index 170fa35..804311d 100644
Binary files a/backend/apps/users/__pycache__/urls.cpython-314.pyc and b/backend/apps/users/__pycache__/urls.cpython-314.pyc differ
diff --git a/backend/apps/users/__pycache__/views.cpython-314.pyc b/backend/apps/users/__pycache__/views.cpython-314.pyc
index 3a6675c..963bdc7 100644
Binary files a/backend/apps/users/__pycache__/views.cpython-314.pyc and b/backend/apps/users/__pycache__/views.cpython-314.pyc differ
diff --git a/backend/apps/users/admin.py b/backend/apps/users/admin.py
index bf5842e..1c05f3f 100644
--- a/backend/apps/users/admin.py
+++ b/backend/apps/users/admin.py
@@ -1,6 +1,15 @@
 from django.contrib import admin
 from django.contrib.auth.admin import UserAdmin as BaseUserAdmin
-from .models import User, RegistrationDomainRule, RegistrationRestrictionSetting
+from django.contrib.auth.models import Group
+from .models import User, RegistrationDomainRule, RegistrationRestrictionSetting, UserActivity
+
+SESSION_MONITOR_GROUP = "Session Monitor"
+
+# Ensure "Session Monitor" group exists in Django Admin
+try:
+    Group.objects.get_or_create(name=SESSION_MONITOR_GROUP)
+except Exception:
+    pass
 
 @admin.register(User)
 class UserAdmin(BaseUserAdmin):
@@ -18,3 +27,9 @@ class RegistrationDomainRuleAdmin(admin.ModelAdmin):
 @admin.register(RegistrationRestrictionSetting)
 class RegistrationRestrictionSettingAdmin(admin.ModelAdmin):
     list_display = ['is_restriction_enabled']
+
+@admin.register(UserActivity)
+class UserActivityAdmin(admin.ModelAdmin):
+    list_display = ['user', 'guest_name', 'ip_address', 'last_path', 'last_seen']
+    list_filter = ['last_seen']
+    search_fields = ['ip_address', 'guest_name', 'user__username', 'user__email', 'user__display_name', 'last_path']
diff --git a/backend/apps/users/middleware.py b/backend/apps/users/middleware.py
new file mode 100644
index 0000000..7309453
--- /dev/null
+++ b/backend/apps/users/middleware.py
@@ -0,0 +1,44 @@
+from .models import UserActivity
+
+class UserActivityMiddleware:
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        response = self.get_response(request)
+
+        # Record activity for non-static requests
+        path = request.path
+        if not path.startswith('/static/') and not path.startswith('/media/'):
+            try:
+                # Ensure session exists
+                if not request.session.session_key:
+                    request.session.create()
+                session_key = request.session.session_key
+
+                # Extract Client IP handling reverse proxies (Traefik / Nginx)
+                x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
+                if x_forwarded_for:
+                    ip = x_forwarded_for.split(',')[0].strip()
+                else:
+                    ip = request.META.get('REMOTE_ADDR', '')
+
+                user_agent = request.META.get('HTTP_USER_AGENT', '')[:245]
+                user = request.user if request.user.is_authenticated else None
+                guest_name = request.session.get('guest_name', '') or request.COOKIES.get('guest_display_name', '')
+
+                if session_key:
+                    UserActivity.objects.update_or_create(
+                        session_key=session_key,
+                        defaults={
+                            'user': user,
+                            'guest_name': guest_name if not user else '',
+                            'ip_address': ip,
+                            'user_agent': user_agent,
+                            'last_path': path[:245],
+                        }
+                    )
+            except Exception:
+                pass
+
+        return response
diff --git a/backend/apps/users/migrations/0007_useractivity.py b/backend/apps/users/migrations/0007_useractivity.py
new file mode 100644
index 0000000..4db8a79
--- /dev/null
+++ b/backend/apps/users/migrations/0007_useractivity.py
@@ -0,0 +1,33 @@
+# Generated by Django 5.2.16 on 2026-08-01 10:25
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('users', '0006_registrationrestrictionsetting_require_email_verification'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='UserActivity',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('guest_name', models.CharField(blank=True, max_length=150, null=True)),
+                ('session_key', models.CharField(db_index=True, max_length=255)),
+                ('ip_address', models.CharField(blank=True, default='', max_length=50)),
+                ('user_agent', models.CharField(blank=True, default='', max_length=255)),
+                ('last_path', models.CharField(blank=True, default='', max_length=255)),
+                ('last_seen', models.DateTimeField(auto_now=True)),
+                ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='activities', to=settings.AUTH_USER_MODEL)),
+            ],
+            options={
+                'verbose_name': 'Benutzer-Aktivität / Sitzung',
+                'verbose_name_plural': 'Benutzer-Aktivitäten / Sitzungen',
+                'ordering': ['-last_seen'],
+            },
+        ),
+    ]
diff --git a/backend/apps/users/models.py b/backend/apps/users/models.py
index 0d2b5f3..de31b95 100644
--- a/backend/apps/users/models.py
+++ b/backend/apps/users/models.py
@@ -86,3 +86,21 @@ class GuestClaimToken(models.Model):
 
     def __str__(self):
         return f"Claim Token for {self.guest_name} ({self.token})"
+
+class UserActivity(models.Model):
+    user = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, null=True, blank=True, related_name='activities')
+    guest_name = models.CharField(max_length=150, null=True, blank=True)
+    session_key = models.CharField(max_length=255, db_index=True)
+    ip_address = models.CharField(max_length=50, blank=True, default='')
+    user_agent = models.CharField(max_length=255, blank=True, default='')
+    last_path = models.CharField(max_length=255, blank=True, default='')
+    last_seen = models.DateTimeField(auto_now=True)
+
+    class Meta:
+        ordering = ['-last_seen']
+        verbose_name = 'Benutzer-Aktivität / Sitzung'
+        verbose_name_plural = 'Benutzer-Aktivitäten / Sitzungen'
+
+    def __str__(self):
+        name = self.user.get_display_name() if self.user else (self.guest_name or "Gast")
+        return f"{name} ({self.ip_address}) - {self.last_seen}"
diff --git a/backend/apps/users/urls.py b/backend/apps/users/urls.py
index 441cb6e..e6ff52f 100644
--- a/backend/apps/users/urls.py
+++ b/backend/apps/users/urls.py
@@ -5,7 +5,7 @@ from .views import (
     RegistrationDomainRuleViewSet, RegistrationRestrictionSettingView,
     PendingUsersView, ApproveUserView, AdminUserViewSet,
     GenerateClaimLinkView, ClaimInfoView,
-    SMTPSettingView, TestSMTPEmailView, UserListView
+    SMTPSettingView, TestSMTPEmailView, UserListView, ActiveSessionsView
 )
 
 router = DefaultRouter()
@@ -18,6 +18,7 @@ urlpatterns = [
     path('login/', LoginView.as_view(), name='login'),
     path('me/', MeView.as_view(), name='me'),
     path('all/', UserListView.as_view(), name='all-users'),
+    path('active-sessions/', ActiveSessionsView.as_view(), name='active-sessions'),
     path('restriction-setting/', RegistrationRestrictionSettingView.as_view(), name='restriction-setting'),
     path('smtp-setting/', SMTPSettingView.as_view(), name='smtp-setting'),
     path('smtp-setting/test/', TestSMTPEmailView.as_view(), name='smtp-setting-test'),
diff --git a/backend/apps/users/views.py b/backend/apps/users/views.py
index ee7064c..b78f9e0 100644
--- a/backend/apps/users/views.py
+++ b/backend/apps/users/views.py
@@ -1,10 +1,14 @@
 from rest_framework import views, viewsets, permissions, status
+from rest_framework.decorators import action
 from rest_framework.response import Response
 from rest_framework.authtoken.models import Token
 from django.contrib.auth import authenticate, get_user_model
 from django.shortcuts import get_object_or_404
 from django.core.mail import get_connection, EmailMultiAlternatives
-from .models import RegistrationDomainRule, RegistrationRestrictionSetting, GuestClaimToken, EmailVerificationToken, SMTPSetting
+from .models import (
+    RegistrationDomainRule, RegistrationRestrictionSetting, GuestClaimToken,
+    EmailVerificationToken, SMTPSetting, UserActivity
+)
 from .serializers import (
     UserSerializer, AdminUserSerializer, RegisterSerializer,
     RegistrationDomainRuleSerializer, RegistrationRestrictionSettingSerializer, SMTPSettingSerializer
@@ -80,6 +84,17 @@ class AdminUserViewSet(viewsets.ModelViewSet):
         user_to_delete.delete()
         return Response({'message': f'Benutzer "{name}" wurde erfolgreich gelöscht.'})
 
+    @action(detail=True, methods=['post'], url_path='confirm-email')
+    def confirm_email(self, request, pk=None):
+        target_user = self.get_object()
+        target_user.is_email_verified = True
+        target_user.is_approved = True
+        target_user.save()
+        EmailVerificationToken.objects.filter(user=target_user).update(is_used=True)
+        return Response({
+            'message': f'E-Mail-Adresse von {target_user.get_display_name()} ({target_user.email}) wurde manuell von dir als bestätigt markiert.'
+        })
+
 class RegisterView(views.APIView):
     permission_classes = [permissions.AllowAny]
 
@@ -406,3 +421,54 @@ class UserListView(views.APIView):
     def get(self, request):
         users = User.objects.filter(is_active=True).order_by('username')
         return Response(UserSerializer(users, many=True).data)
+
+SESSION_MONITOR_GROUP = "Session Monitor"
+
+class IsSessionMonitorGroupOrSuperuser(permissions.BasePermission):
+    def has_permission(self, request, view):
+        if not request.user or not request.user.is_authenticated:
+            return False
+        if request.user.is_superuser:
+            return True
+        return request.user.groups.filter(name=SESSION_MONITOR_GROUP).exists()
+
+class ActiveSessionsView(views.APIView):
+    permission_classes = [IsSessionMonitorGroupOrSuperuser]
+
+    def get(self, request):
+        from datetime import timedelta
+        from django.utils import timezone
+        cutoff = timezone.now() - timedelta(hours=24)
+
+        activities = UserActivity.objects.filter(last_seen__gte=cutoff).select_related('user').order_by('-last_seen')
+
+        data = []
+        for act in activities:
+            user_info = None
+            if act.user:
+                user_info = {
+                    'id': act.user.id,
+                    'username': act.user.username,
+                    'email': act.user.email,
+                    'display_name': act.user.get_display_name(),
+                    'is_admin': act.user.is_admin_user or act.user.is_staff or act.user.is_superuser,
+                }
+
+            data.append({
+                'id': act.id,
+                'user': user_info,
+                'guest_name': act.guest_name if not act.user else None,
+                'display_name': act.user.get_display_name() if act.user else (act.guest_name or "Unangemeldeter Gast"),
+                'session_key': act.session_key[:12] + '...',
+                'ip_address': act.ip_address or '127.0.0.1',
+                'user_agent': act.user_agent,
+                'last_path': act.last_path,
+                'last_seen': act.last_seen.isoformat(),
+            })
+
+        return Response({
+            'group_name': SESSION_MONITOR_GROUP,
+            'is_authorized': True,
+            'count': len(data),
+            'sessions': data
+        })
diff --git a/backend/db.sqlite3 b/backend/db.sqlite3
index 2ded35b..71df3a1 100644
Binary files a/backend/db.sqlite3 and b/backend/db.sqlite3 differ
diff --git a/backend/shiftplan_backend/__pycache__/settings.cpython-314.pyc b/backend/shiftplan_backend/__pycache__/settings.cpython-314.pyc
index c47fe4e..0f844e6 100644
Binary files a/backend/shiftplan_backend/__pycache__/settings.cpython-314.pyc and b/backend/shiftplan_backend/__pycache__/settings.cpython-314.pyc differ
diff --git a/backend/shiftplan_backend/settings.py b/backend/shiftplan_backend/settings.py
index 54695bd..0ce2a90 100644
--- a/backend/shiftplan_backend/settings.py
+++ b/backend/shiftplan_backend/settings.py
@@ -71,6 +71,7 @@ MIDDLEWARE = [
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
+    'apps.users.middleware.UserActivityMiddleware',
 ]
 
 ROOT_URLCONF = 'shiftplan_backend.urls'
diff --git a/frontend/dist/index.html b/frontend/dist/index.html
index 1407310..0c6b9ca 100644
--- a/frontend/dist/index.html
+++ b/frontend/dist/index.html
@@ -11,8 +11,8 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@500;600;700&family=JetBrains+Mono:wght@400;500;600;700&family=Plus+Jakarta+Sans:wght@400;500;600;700;800&display=swap" rel="stylesheet">
     <title>Schichtplaner — Veranstaltungsschichtpläne</title>
-    <script type="module" crossorigin src="/assets/index-AKhcitQN.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-DHeBvKbG.css">
+    <script type="module" crossorigin src="/assets/index-RWm1c0SS.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-BIEZThrv.css">
   </head>
   <body class="bg-paper text-main font-sans antialiased min-h-screen">
     <div id="root"></div>
diff --git a/frontend/src/pages/AdminPage.jsx b/frontend/src/pages/AdminPage.jsx
index 66b9d36..eebadab 100644
--- a/frontend/src/pages/AdminPage.jsx
+++ b/frontend/src/pages/AdminPage.jsx
@@ -4,13 +4,13 @@ import React, { useState, useEffect } from 'react';
 import {
   Shield, Settings, Users, Calendar, Layers, Palette, Plus, Trash2, Edit3,
   UserCheck, UserX, Clock, CheckCircle2, AlertCircle, Layout, Search, Eye, EyeOff,
-  Mail, Send, Lock
+  Mail, Send, Lock, Activity
 } from 'lucide-react';
 import { apiFetch } from '../api/client';
 import { getRandomSkillColor } from '../utils/colors';
 
 export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents, skills, onRefreshSkills }) {
-  const [activeAdminTab, setActiveAdminTab] = useState('users'); // 'users' | 'events' | 'templates' | 'branding' | 'smtp'
+  const [activeAdminTab, setActiveAdminTab] = useState('users'); // 'users' | 'events' | 'templates' | 'branding' | 'smtp' | 'sessions'
 
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState('');
@@ -65,6 +65,11 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
   const [savingSmtp, setSavingSmtp] = useState(false);
   const [testingSmtp, setTestingSmtp] = useState(false);
 
+  // 6. Active Sessions & IP Monitoring State (Restricted to Session Monitor Django Group or Superuser)
+  const [activeSessions, setActiveSessions] = useState([]);
+  const [isSessionMonitorAuthorized, setIsSessionMonitorAuthorized] = useState(false);
+  const [sessionMonitorGroupName, setSessionMonitorGroupName] = useState('Session Monitor');
+
   useEffect(() => {
     fetchAdminData();
   }, []);
@@ -118,6 +123,15 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
         }
       } catch (e) {}
 
+      try {
+        const sessionData = await apiFetch('/users/active-sessions/');
+        setActiveSessions(sessionData.sessions || []);
+        setIsSessionMonitorAuthorized(true);
+        setSessionMonitorGroupName(sessionData.group_name || 'Session Monitor');
+      } catch (e) {
+        setIsSessionMonitorAuthorized(false);
+      }
+
     } catch (err) {
       setError(err.message || 'Laden der Admin-Daten fehlgeschlagen.');
     } finally {
@@ -157,6 +171,18 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
     }
   };
 
+  const handleConfirmUserEmail = async (userId) => {
+    try {
+      const res = await apiFetch(`/users/manage-users/${userId}/confirm-email/`, {
+        method: 'POST'
+      });
+      showNotif(res.message || 'E-Mail-Adresse manuell als bestätigt markiert.');
+      fetchAdminData();
+    } catch (err) {
+      setError(err.message || 'Fehler beim Bestätigen der E-Mail.');
+    }
+  };
+
   const handleDeleteUser = async (userObj) => {
     if (!window.confirm(`Möchtest du das Benutzerkonto "${userObj.display_name || userObj.username}" (@${userObj.username}) wirklich dauerhaft löschen?`)) {
       return;
@@ -178,9 +204,9 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
       await apiFetch(`/users/${userId}/approve/`, { method: 'POST' });
       setPendingUsers(pendingUsers.filter(u => u.id !== userId));
       fetchAdminData();
-      showNotif('Benutzer erfolgreich freigeschaltet.');
+      showNotif('Benutzer wurde freigeschaltet!');
     } catch (e) {
-      setError(e.message || 'Freischalten fehlgeschlagen.');
+      setError(e.message || 'Fehler beim Freischalten.');
     }
   };
 
@@ -188,45 +214,44 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
     try {
       await apiFetch(`/users/${userId}/approve/`, { method: 'DELETE' });
       setPendingUsers(pendingUsers.filter(u => u.id !== userId));
-      showNotif('Benutzer abgelehnt und gelöscht.');
+      showNotif('Registrierungsanfrage abgelehnt.');
     } catch (e) {
-      setError(e.message || 'Ablehnen fehlgeschlagen.');
+      setError(e.message || 'Fehler beim Ablehnen.');
     }
   };
 
-  const handleToggleRestriction = async (key, val) => {
+  // --- SECURITY SETTINGS ---
+  const handleSaveSecuritySettings = async (e) => {
+    e.preventDefault();
     try {
-      const payload = {
-        is_restriction_enabled: key === 'restriction' ? val : restrictionEnabled,
-        require_admin_approval: key === 'approval' ? val : requireApproval,
-        require_email_verification: key === 'email_verify' ? val : requireEmailVerification
-      };
-      const res = await apiFetch('/users/restriction-setting/', {
+      await apiFetch('/users/restriction-setting/', {
         method: 'POST',
-        body: JSON.stringify(payload)
+        body: JSON.stringify({
+          is_restriction_enabled: restrictionEnabled,
+          require_admin_approval: requireApproval,
+          require_email_verification: requireEmailVerification
+        })
       });
-      setRestrictionEnabled(res.is_restriction_enabled);
-      setRequireApproval(res.require_admin_approval);
-      setRequireEmailVerification(res.require_email_verification);
-      showNotif('Sicherheitseinstellungen aktualisiert.');
-    } catch (e) {
-      setError(e.message || 'Aktualisierung fehlgeschlagen.');
+      showNotif('Sicherheitseinstellungen gespeichert!');
+    } catch (err) {
+      setError(err.message || 'Speichern der Sicherheitseinstellungen fehlgeschlagen.');
     }
   };
 
   const handleAddDomainRule = async (e) => {
     e.preventDefault();
     if (!newDomain.trim()) return;
+
     try {
-      const rule = await apiFetch('/users/domain-rules/', {
+      const created = await apiFetch('/users/domain-rules/', {
         method: 'POST',
-        body: JSON.stringify({ domain: newDomain })
+        body: JSON.stringify({ domain: newDomain.trim(), is_active: true })
       });
-      setDomainRules([...domainRules, rule]);
+      setDomainRules([...domainRules, created]);
       setNewDomain('');
-      showNotif(`Domain-Regel "${rule.domain}" hinzugefügt.`);
-    } catch (e) {
-      setError(e.message || 'Fehler beim Hinzufügen.');
+      showNotif(`Domain-Regel "${created.domain}" hinzugefügt.`);
+    } catch (err) {
+      setError(err.message || 'Hinzufügen der Domain-Regel fehlgeschlagen.');
     }
   };
 
@@ -235,51 +260,68 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
       await apiFetch(`/users/domain-rules/${id}/`, { method: 'DELETE' });
       setDomainRules(domainRules.filter(r => r.id !== id));
       showNotif('Domain-Regel entfernt.');
-    } catch (e) {
-      setError(e.message || 'Fehler beim Löschen.');
+    } catch (err) {
+      setError(err.message || 'Fehler beim Löschen der Regel.');
     }
   };
 
-  // --- SKILLS & TEMPLATES ---
+  // --- EVENTS ACTIONS ---
+  const handleDeleteEvent = async (eventObj) => {
+    if (!window.confirm(`Möchtest du die Veranstaltung "${eventObj.title}" unwiderruflich löschen?`)) return;
+
+    try {
+      await apiFetch(`/events/${eventObj.id}/`, { method: 'DELETE' });
+      setEventsList(eventsList.filter(e => e.id !== eventObj.id));
+      if (onRefreshEvents) onRefreshEvents();
+      showNotif('Veranstaltung wurde gelöscht.');
+    } catch (err) {
+      setError(err.message || 'Löschen fehlgeschlagen.');
+    }
+  };
+
+  // --- TEMPLATES & SKILLS ACTIONS ---
   const handleCreateSkill = async (e) => {
     e.preventDefault();
     if (!newSkillName.trim()) return;
+
     try {
       await apiFetch('/skills/', {
         method: 'POST',
         body: JSON.stringify({
-          name: newSkillName,
-          description: newSkillDesc,
+          name: newSkillName.trim(),
+          description: newSkillDesc.trim(),
           color: newSkillColor
         })
       });
       setNewSkillName('');
       setNewSkillDesc('');
       setNewSkillColor(getRandomSkillColor());
-      onRefreshSkills();
-      showNotif('Qualifikation angelegt.');
-    } catch (e) {
-      setError(e.message || 'Fehler beim Anlegen.');
+      showNotif('Neue Qualifikation angelegt.');
+      if (onRefreshSkills) onRefreshSkills();
+    } catch (err) {
+      setError(err.message || 'Anlegen der Qualifikation fehlgeschlagen.');
     }
   };
 
-  const handleDeleteSkill = async (id) => {
+  const handleDeleteSkill = async (skillId) => {
+    if (!window.confirm('Fähigkeit wirklich löschen?')) return;
     try {
-      await apiFetch(`/skills/${id}/`, { method: 'DELETE' });
-      onRefreshSkills();
+      await apiFetch(`/skills/${skillId}/`, { method: 'DELETE' });
       showNotif('Qualifikation gelöscht.');
-    } catch (e) {
-      setError(e.message || 'Fehler beim Löschen.');
+      if (onRefreshSkills) onRefreshSkills();
+    } catch (err) {
+      setError(err.message || 'Löschen fehlgeschlagen.');
     }
   };
 
-  const handleDeleteTemplate = async (id) => {
+  const handleDeleteTemplate = async (templateId) => {
+    if (!window.confirm('Vorlage wirklich löschen?')) return;
     try {
-      await apiFetch(`/templates/${id}/`, { method: 'DELETE' });
-      setTemplatesList(templatesList.filter(t => t.id !== id));
+      await apiFetch(`/templates/${templateId}/`, { method: 'DELETE' });
+      setTemplatesList(templatesList.filter(t => t.id !== templateId));
       showNotif('Vorlage gelöscht.');
-    } catch (e) {
-      setError(e.message || 'Fehler beim Löschen.');
+    } catch (err) {
+      setError(err.message || 'Löschen der Vorlage fehlgeschlagen.');
     }
   };
 
@@ -360,24 +402,36 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
   );
 
   return (
-    <div className="space-y-6 max-w-5xl mx-auto animate-in fade-in duration-200 font-sans">
-      {/* Header Banner */}
-      <div className="hallmark-panel rounded-sm p-6 sm:p-8 border border-grid space-y-2">
-        <div className="flex items-center gap-3">
-          <div className="w-10 h-10 rounded-sm bg-indigo-500/10 text-indigo-500 border border-indigo-500/20 flex items-center justify-center font-bold">
-            <Shield className="w-5 h-5" />
-          </div>
-          <div>
-            <h2 className="font-serif text-3xl font-bold uppercase tracking-tight text-main">
-              System Administration
-            </h2>
-            <p className="text-xs text-muted font-mono mt-0.5">
-              Verwaltung von Benutzern, Freischaltungen, Events, Vorlagen, Branding & SMTP-Mailserver
-            </p>
+    <div className="space-y-6 max-w-6xl mx-auto animate-in fade-in duration-200 font-sans">
+      {/* Header Panel */}
+      <div className="hallmark-panel rounded-sm p-6 sm:p-8 border border-grid flex flex-col md:flex-row md:items-center justify-between gap-4">
+        <div className="space-y-1">
+          <div className="flex items-center gap-2 font-mono text-xs text-indigo-400 font-bold mb-1">
+            <Shield className="w-4 h-4" /> [ SYSTEM-STEUERUNG & ADMINDISTRIBUTION ]
           </div>
+          <h2 className="font-serif text-3xl sm:text-4xl font-bold uppercase tracking-tight text-main">
+            Verwaltungszentrale
+          </h2>
+          <p className="text-xs text-muted font-mono max-w-2xl mt-1">
+            Verwalte Konten, Sicherheit, Domain-Regeln, Vorlagen, SMTP & Live-Sitzungen
+          </p>
         </div>
       </div>
 
+      {error && (
+        <div className="p-4 rounded-sm bg-red-500/10 border border-red-500/20 text-red-500 text-xs font-mono flex items-center gap-2">
+          <AlertCircle className="w-4 h-4 shrink-0" />
+          <span>{error}</span>
+        </div>
+      )}
+
+      {success && (
+        <div className="p-4 rounded-sm bg-emerald-500/10 border border-emerald-500/20 text-emerald-400 text-xs font-mono flex items-center gap-2">
+          <CheckCircle2 className="w-4 h-4 shrink-0" />
+          <span>{success}</span>
+        </div>
+      )}
+
       {/* Atelier Stencil Tab Bar */}
       <div className="border-b border-grid pb-2">
         <div className="flex items-center gap-1.5 font-mono text-xs overflow-x-auto no-scrollbar">
@@ -435,681 +489,727 @@ export default function AdminPage({ branding, onRefreshBranding, onRefreshEvents
           >
             <Mail className="w-3.5 h-3.5 text-purple-400" /> [ 05: E-MAIL & SMTP ]
           </button>
+
+          {isSessionMonitorAuthorized && (
+            <button
+              onClick={() => setActiveAdminTab('sessions')}
+              className={`px-4 py-2 rounded-sm transition flex items-center gap-2 border ${
+                activeAdminTab === 'sessions'
+                  ? 'bg-surface-hover text-main font-bold border-grid shadow-sm'
+                  : 'bg-subtle text-muted border-transparent hover:text-main'
+              }`}
+            >
+              <Activity className="w-3.5 h-3.5 text-rose-400" /> [ 06: LIVE-SITZUNGEN & IP ({activeSessions.length}) ]
+            </button>
+          )}
         </div>
       </div>
 
-      {/* Notifications */}
-      {error && (
-        <div className="p-4 rounded-sm bg-red-500/10 border border-red-500/20 text-red-500 text-xs font-mono flex items-center gap-2">
-          <AlertCircle className="w-4 h-4 shrink-0" />
-          <span>{error}</span>
+      {loading ? (
+        <div className="hallmark-panel p-16 text-center text-xs text-muted font-mono border border-grid">
+          Lade Admin-Daten...
         </div>
-      )}
+      ) : (
+        <>
+          {/* TAB 01: BENUTZER & SICHERHEIT */}
+          {activeAdminTab === 'users' && (
+            <div className="space-y-6 font-mono text-xs">
+              {/* Pending Approvals Section */}
+              {pendingUsers.length > 0 && (
+                <div className="hallmark-panel rounded-sm p-5 border border-amber-500/40 bg-amber-500/5 space-y-3">
+                  <h3 className="font-serif text-lg font-bold uppercase text-amber-500 flex items-center gap-2 border-b border-amber-500/20 pb-2">
+                    ⚠️ Ausstehende Registrierungen ({pendingUsers.length})
+                  </h3>
+                  <div className="space-y-2">
+                    {pendingUsers.map(pu => (
+                      <div key={pu.id} className="p-3 rounded-sm bg-surface border border-grid flex items-center justify-between text-xs">
+                        <div>
+                          <div className="font-bold text-main">{pu.display_name} (@{pu.username})</div>
+                          <div className="text-[11px] text-muted">{pu.email}</div>
+                        </div>
+                        <div className="flex items-center gap-2">
+                          <button
+                            onClick={() => handleConfirmUserEmail(pu.id)}
+                            className="px-3 py-1 rounded-sm bg-emerald-600 hover:bg-emerald-500 text-white font-bold text-xs flex items-center gap-1"
+                            title="E-Mail-Adresse und Konto direkt vom Admin bestätigen und freischalten"
+                          >
+                            <Mail className="w-3.5 h-3.5" /> FREISCHALTEN & BESTÄTIGEN
+                          </button>
+                          <button
+                            onClick={() => handleRejectPendingUser(pu.id)}
+                            className="px-3 py-1 rounded-sm bg-red-600/20 text-red-400 hover:bg-red-600/30 border border-red-600/30 font-bold text-xs"
+                          >
+                            [ ABLEHNEN ]
+                          </button>
+                        </div>
+                      </div>
+                    ))}
+                  </div>
+                </div>
+              )}
 
-      {success && (
-        <div className="p-4 rounded-sm bg-emerald-500/10 border border-emerald-500/20 text-emerald-400 text-xs font-mono flex items-center gap-2">
-          <CheckCircle2 className="w-4 h-4 shrink-0" />
-          <span>{success}</span>
-        </div>
-      )}
+              {/* User Filter Search Bar */}
+              <div className="hallmark-panel rounded-sm p-4 border border-grid flex items-center gap-3">
+                <Search className="w-4 h-4 text-muted shrink-0" />
+                <input
+                  type="text"
+                  value={userSearchQuery}
+                  onChange={(e) => setUserSearchQuery(e.target.value)}
+                  placeholder="Nutzer suchen nach Name, Username oder E-Mail..."
+                  className="w-full bg-subtle border border-grid px-3 py-1.5 rounded-sm text-xs font-mono text-main focus:outline-none focus:border-muted"
+                />
+                {userSearchQuery && (
+                  <button onClick={() => setUserSearchQuery('')} className="text-xs text-muted hover:text-main font-mono shrink-0">
+                    [ CLEAR ]
+                  </button>
+                )}
+              </div>
 
-      {/* TAB 1: BENUTZER & SICHERHEIT */}
-      {activeAdminTab === 'users' && (
-        <div className="space-y-6 animate-in fade-in duration-150 font-mono">
-          {/* Pending Approval Section */}
-          {pendingUsers.length > 0 && (
-            <div className="hallmark-panel rounded-sm p-5 border border-amber-500/40 bg-amber-500/5 space-y-3">
-              <h3 className="font-serif text-lg font-bold uppercase text-amber-500 flex items-center gap-2 border-b border-amber-500/20 pb-2">
-                ⚠️ Ausstehende Registrierungen ({pendingUsers.length})
+              {/* User List Table */}
+              <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
+                <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
+                  Benutzerkonten & Rechtestatus ({filteredUsers.length})
+                </h3>
+                <div className="overflow-x-auto">
+                  <table className="w-full text-left border-collapse text-xs">
+                    <thead>
+                      <tr className="border-b border-grid text-muted uppercase text-[10px]">
+                        <th className="pb-2 font-bold">Nutzer</th>
+                        <th className="pb-2 font-bold">E-Mail</th>
+                        <th className="pb-2 font-bold">Freigeschaltet</th>
+                        <th className="pb-2 font-bold">E-Mail Bestätigt</th>
+                        <th className="pb-2 font-bold">Admin-Rolle</th>
+                        <th className="pb-2 font-bold text-right">Aktionen</th>
+                      </tr>
+                    </thead>
+                    <tbody className="divide-y divide-grid">
+                      {filteredUsers.map(u => (
+                        <tr key={u.id} className="hover:bg-subtle/50 transition">
+                          <td className="py-2.5 font-bold text-main">
+                            {u.display_name || u.username}
+                            <span className="text-[10px] text-muted font-normal block">@{u.username}</span>
+                          </td>
+                          <td className="py-2.5 text-muted">{u.email}</td>
+                          <td className="py-2.5">
+                            <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
+                              u.is_approved ? 'bg-emerald-500/10 text-emerald-400 border-emerald-500/20' : 'bg-amber-500/10 text-amber-400 border-amber-500/20'
+                            }`}>
+                              {u.is_approved ? 'JA' : 'NEIN'}
+                            </span>
+                          </td>
+                          <td className="py-2.5">
+                            <div className="flex items-center gap-1.5 flex-wrap">
+                              <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
+                                u.is_email_verified ? 'bg-emerald-500/10 text-emerald-400 border-emerald-500/20' : 'bg-amber-500/10 text-amber-400 border-amber-500/20'
+                              }`}>
+                                {u.is_email_verified ? 'VERIFIZIERT' : 'AUSSTEHEND'}
+                              </span>
+                              {!u.is_email_verified && (
+                                <button
+                                  onClick={() => handleConfirmUserEmail(u.id)}
+                                  className="px-2 py-0.5 rounded-sm text-[10px] font-mono font-bold bg-amber-500/20 hover:bg-amber-500/30 text-amber-300 border border-amber-500/40 transition flex items-center gap-1"
+                                  title="E-Mail-Adresse für dieses Konto manuell als bestätigt markieren"
+                                >
+                                  <Mail className="w-3 h-3" /> BESTÄTIGEN
+                                </button>
+                              )}
+                            </div>
+                          </td>
+                          <td className="py-2.5">
+                            <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
+                              u.is_admin_user || u.is_superuser ? 'bg-indigo-500/10 text-indigo-400 border-indigo-500/20' : 'bg-subtle text-muted border-grid'
+                            }`}>
+                              {u.is_superuser ? 'SUPERUSER' : u.is_admin_user ? 'ADMIN' : 'USER'}
+                            </span>
+                          </td>
+                          <td className="py-2.5 text-right space-x-1">
+                            <button
+                              onClick={() => handleToggleUserApproved(u)}
+                              className="px-2 py-1 rounded-sm text-[10px] bg-subtle hover:bg-surface-hover border border-grid text-main transition"
+                            >
+                              {u.is_approved ? 'Sperren' : 'Freischalten'}
+                            </button>
+                            <button
+                              onClick={() => handleToggleUserAdmin(u)}
+                              className="px-2 py-1 rounded-sm text-[10px] bg-subtle hover:bg-surface-hover border border-grid text-indigo-400 transition"
+                            >
+                              {u.is_admin_user ? 'Admin entziehen' : 'Zu Admin machen'}
+                            </button>
+                            <button
+                              onClick={() => handleDeleteUser(u)}
+                              className="px-2 py-1 rounded-sm text-[10px] bg-red-500/10 hover:bg-red-500/20 border border-red-500/20 text-red-400 font-bold transition inline-flex items-center gap-1"
+                              title="Benutzerkonto dauerhaft löschen"
+                            >
+                              <Trash2 className="w-3 h-3" /> Löschen
+                            </button>
+                          </td>
+                        </tr>
+                      ))}
+                    </tbody>
+                  </table>
+                </div>
+              </div>
+
+              {/* Security & Domain Restrictions */}
+              <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
+                <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
+                  Registrierungseinschränkungen & Domains
+                </h3>
+
+                <form onSubmit={handleSaveSecuritySettings} className="space-y-3">
+                  <div className="flex items-center justify-between p-3 rounded-sm bg-subtle border border-grid">
+                    <div>
+                      <div className="font-bold text-main">Domain-Einschränkung aktivieren</div>
+                      <div className="text-[11px] text-muted">Nur E-Mails aus erlaubten Domains zulassen</div>
+                    </div>
+                    <input
+                      type="checkbox"
+                      checked={restrictionEnabled}
+                      onChange={(e) => setRestrictionEnabled(e.target.checked)}
+                      className="w-4 h-4 accent-indigo-500 cursor-pointer"
+                    />
+                  </div>
+
+                  <div className="flex items-center justify-between p-3 rounded-sm bg-subtle border border-grid">
+                    <div>
+                      <div className="font-bold text-main">Manuelle Admin-Freischaltung erzwingen</div>
+                      <div className="text-[11px] text-muted">Neue Konten sind erst nach Admin-Freigabe aktiv</div>
+                    </div>
+                    <input
+                      type="checkbox"
+                      checked={requireApproval}
+                      onChange={(e) => setRequireApproval(e.target.checked)}
+                      className="w-4 h-4 accent-indigo-500 cursor-pointer"
+                    />
+                  </div>
+
+                  <div className="flex items-center justify-between p-3 rounded-sm bg-subtle border border-grid">
+                    <div>
+                      <div className="font-bold text-main">E-Mail-Bestätigung erzwingen</div>
+                      <div className="text-[11px] text-muted">Benutzer müssen ihre E-Mail-Adresse per Link verifizieren</div>
+                    </div>
+                    <input
+                      type="checkbox"
+                      checked={requireEmailVerification}
+                      onChange={(e) => setRequireEmailVerification(e.target.checked)}
+                      className="w-4 h-4 accent-indigo-500 cursor-pointer"
+                    />
+                  </div>
+
+                  <div className="pt-2 flex justify-end">
+                    <button
+                      type="submit"
+                      className="px-4 py-2 rounded-sm bg-indigo-600 hover:bg-indigo-500 text-white font-bold text-xs"
+                    >
+                      [ EINSTELLUNGEN SPEICHERN ]
+                    </button>
+                  </div>
+                </form>
+
+                {/* Domain Rules Manager */}
+                <div className="pt-4 border-t border-grid space-y-3">
+                  <h4 className="font-bold text-main text-xs uppercase">Erlaubte E-Mail-Domains</h4>
+                  <form onSubmit={handleAddDomainRule} className="flex gap-2">
+                    <input
+                      type="text"
+                      placeholder="z. B. verein.de oder @beispiel.org"
+                      value={newDomain}
+                      onChange={(e) => setNewDomain(e.target.value)}
+                      className="flex-1 bg-subtle border border-grid px-3 py-1.5 rounded-sm text-xs font-mono"
+                    />
+                    <button
+                      type="submit"
+                      className="px-4 py-1.5 rounded-sm bg-surface hover:bg-surface-hover text-main border border-grid font-bold text-xs"
+                    >
+                      [ HINZUFÜGEN ]
+                    </button>
+                  </form>
+
+                  <div className="space-y-1 pt-2">
+                    {domainRules.length === 0 ? (
+                      <p className="text-xs text-muted italic">[ Keine Domain-Regeln definiert. Alle E-Mail-Domains sind erlaubt. ]</p>
+                    ) : (
+                      domainRules.map(r => (
+                        <div key={r.id} className="flex items-center justify-between p-2 rounded-sm bg-subtle border border-grid text-xs">
+                          <span className="font-mono font-bold text-main">{r.domain}</span>
+                          <button
+                            onClick={() => handleDeleteDomainRule(r.id)}
+                            className="text-red-400 hover:underline text-[11px]"
+                          >
+                            [ ENTFERNEN ]
+                          </button>
+                        </div>
+                      ))
+                    )}
+                  </div>
+                </div>
+              </div>
+            </div>
+          )}
+
+          {/* TAB 02: VERANSTALTUNGEN */}
+          {activeAdminTab === 'events' && (
+            <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4 font-mono text-xs">
+              <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
+                Veranstaltungen verwalten ({eventsList.length})
               </h3>
               <div className="space-y-2">
-                {pendingUsers.map(pu => (
-                  <div key={pu.id} className="p-3 rounded-sm bg-surface border border-grid flex items-center justify-between text-xs">
+                {eventsList.map(evt => (
+                  <div key={evt.id} className="p-3.5 rounded-sm bg-subtle border border-grid flex items-center justify-between gap-4">
                     <div>
-                      <div className="font-bold text-main">{pu.display_name} (@{pu.username})</div>
-                      <div className="text-[11px] text-muted">{pu.email}</div>
-                    </div>
-                    <div className="flex items-center gap-2">
-                      <button
-                        onClick={() => handleApprovePendingUser(pu.id)}
-                        className="px-3 py-1 rounded-sm bg-emerald-600 hover:bg-emerald-500 text-white font-bold text-xs"
-                      >
-                        [ FREISCHALTEN ]
-                      </button>
-                      <button
-                        onClick={() => handleRejectPendingUser(pu.id)}
-                        className="px-3 py-1 rounded-sm bg-red-600/20 text-red-400 hover:bg-red-600/30 border border-red-600/30 font-bold text-xs"
-                      >
-                        [ ABLEHNEN ]
-                      </button>
+                      <div className="font-bold text-main text-sm flex items-center gap-2">
+                        {evt.title}
+                        {evt.is_active === false && (
+                          <span className="text-[10px] text-amber-500 font-bold">[ DEAKTIVIERT ]</span>
+                        )}
+                      </div>
+                      <div className="text-[11px] text-muted">
+                        {new Date(evt.start_date).toLocaleDateString('de-DE')} — {new Date(evt.end_date).toLocaleDateString('de-DE')} {evt.location ? `| Ort: ${evt.location}` : ''}
+                      </div>
                     </div>
+                    <button
+                      onClick={() => handleDeleteEvent(evt)}
+                      className="px-3 py-1.5 rounded-sm bg-red-500/10 hover:bg-red-500/20 text-red-400 border border-red-500/30 transition font-bold text-xs shrink-0 flex items-center gap-1"
+                    >
+                      <Trash2 className="w-3.5 h-3.5" /> LÖSCHEN
+                    </button>
                   </div>
                 ))}
               </div>
             </div>
           )}
 
-          {/* User Filter Search Bar */}
-          <div className="hallmark-panel rounded-sm p-4 border border-grid flex items-center gap-3">
-            <Search className="w-4 h-4 text-muted shrink-0" />
-            <input
-              type="text"
-              value={userSearchQuery}
-              onChange={(e) => setUserSearchQuery(e.target.value)}
-              placeholder="Nutzer suchen nach Name, Username oder E-Mail..."
-              className="w-full bg-subtle border border-grid px-3 py-1.5 rounded-sm text-xs font-mono text-main focus:outline-none focus:border-muted"
-            />
-            {userSearchQuery && (
-              <button onClick={() => setUserSearchQuery('')} className="text-xs text-muted hover:text-main font-mono shrink-0">
-                [ CLEAR ]
-              </button>
-            )}
-          </div>
+          {/* TAB 03: VORLAGEN & SKILLS */}
+          {activeAdminTab === 'templates' && (
+            <div className="space-y-6 font-mono text-xs">
+              {/* Skills Management */}
+              <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
+                <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
+                  System-Qualifikationen & Fähigkeiten ({skills.length})
+                </h3>
 
-          {/* All Users List Table */}
-          <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
-            <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
-              Benutzerkonten & Rechtestatus ({filteredUsers.length})
-            </h3>
-            <div className="overflow-x-auto">
-              <table className="w-full text-left border-collapse text-xs">
-                <thead>
-                  <tr className="border-b border-grid text-muted uppercase text-[10px]">
-                    <th className="pb-2 font-bold">Nutzer</th>
-                    <th className="pb-2 font-bold">E-Mail</th>
-                    <th className="pb-2 font-bold">Freigeschaltet</th>
-                    <th className="pb-2 font-bold">E-Mail Bestätigt</th>
-                    <th className="pb-2 font-bold">Admin-Rolle</th>
-                    <th className="pb-2 font-bold text-right">Aktionen</th>
-                  </tr>
-                </thead>
-                <tbody className="divide-y divide-grid">
-                  {filteredUsers.map(u => (
-                    <tr key={u.id} className="hover:bg-subtle/50 transition">
-                      <td className="py-2.5 font-bold text-main">
-                        {u.display_name || u.username}
-                        <span className="text-[10px] text-muted font-normal block">@{u.username}</span>
-                      </td>
-                      <td className="py-2.5 text-muted">{u.email}</td>
-                      <td className="py-2.5">
-                        <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
-                          u.is_approved ? 'bg-emerald-500/10 text-emerald-400 border-emerald-500/20' : 'bg-amber-500/10 text-amber-400 border-amber-500/20'
-                        }`}>
-                          {u.is_approved ? 'JA' : 'NEIN'}
-                        </span>
-                      </td>
-                      <td className="py-2.5">
-                        <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
-                          u.is_email_verified ? 'bg-emerald-500/10 text-emerald-400 border-emerald-500/20' : 'bg-subtle text-muted border-grid'
-                        }`}>
-                          {u.is_email_verified ? 'VERIFIZIERT' : 'AUSSTEHEND'}
-                        </span>
-                      </td>
-                      <td className="py-2.5">
-                        <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
-                          u.is_admin_user || u.is_superuser ? 'bg-indigo-500/10 text-indigo-400 border-indigo-500/20' : 'bg-subtle text-muted border-grid'
-                        }`}>
-                          {u.is_superuser ? 'SUPERUSER' : u.is_admin_user ? 'ADMIN' : 'USER'}
-                        </span>
-                      </td>
-                      <td className="py-2.5 text-right space-x-1">
-                        <button
-                          onClick={() => handleToggleUserApproved(u)}
-                          className="px-2 py-1 rounded-sm text-[10px] bg-subtle hover:bg-surface-hover border border-grid text-main transition"
-                        >
-                          {u.is_approved ? 'Sperren' : 'Freischalten'}
-                        </button>
-                        <button
-                          onClick={() => handleToggleUserAdmin(u)}
-                          className="px-2 py-1 rounded-sm text-[10px] bg-subtle hover:bg-surface-hover border border-grid text-indigo-400 transition"
-                        >
-                          {u.is_admin_user ? 'Admin entziehen' : 'Zu Admin machen'}
-                        </button>
-                        <button
-                          onClick={() => handleDeleteUser(u)}
-                          className="px-2 py-1 rounded-sm text-[10px] bg-red-500/10 hover:bg-red-500/20 border border-red-500/20 text-red-400 font-bold transition inline-flex items-center gap-1"
-                          title="Benutzerkonto dauerhaft löschen"
-                        >
-                          <Trash2 className="w-3 h-3" /> Löschen
-                        </button>
-                      </td>
-                    </tr>
-                  ))}
-                </tbody>
-              </table>
-            </div>
-          </div>
-
-          {/* Security & Domain Restrictions */}
-          <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
-            <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
-              Sicherheit & Registrierungs-Einschränkungen
-            </h3>
-
-            <div className="grid grid-cols-1 sm:grid-cols-3 gap-4">
-              <div className="p-4 rounded-sm bg-subtle border border-grid space-y-2">
-                <div className="flex items-center justify-between">
-                  <span className="font-bold text-main">E-Mail Bestätigung (Opt-Out)</span>
-                  <button
-                    onClick={() => handleToggleRestriction('email_verify', !requireEmailVerification)}
-                    className={`px-3 py-1 rounded-sm text-xs font-bold transition border ${
-                      requireEmailVerification ? 'bg-emerald-600 text-white border-emerald-500' : 'bg-amber-500/10 text-amber-500 border-amber-500/20'
-                    }`}
-                  >
-                    {requireEmailVerification ? '[ PFLICHT ]' : '[ DEAKTIVIERT ]'}
-                  </button>
-                </div>
-                <p className="text-[11px] text-muted font-sans">
-                  Bei Pflicht muss die E-Mail vor der Anmeldung verifiziert werden. Bei Deaktivierung ist die Anmeldung direkt möglich.
-                </p>
-              </div>
-
-              <div className="p-4 rounded-sm bg-subtle border border-grid space-y-2">
-                <div className="flex items-center justify-between">
-                  <span className="font-bold text-main">Domain-Einschränkung</span>
-                  <button
-                    onClick={() => handleToggleRestriction('restriction', !restrictionEnabled)}
-                    className={`px-3 py-1 rounded-sm text-xs font-bold transition border ${
-                      restrictionEnabled ? 'bg-emerald-600 text-white border-emerald-500' : 'bg-surface text-muted border-grid'
-                    }`}
-                  >
-                    {restrictionEnabled ? '[ AKTIV ]' : '[ INAKTIV ]'}
-                  </button>
-                </div>
-                <p className="text-[11px] text-muted font-sans">
-                  Erlaubt nur Registrierungen von festgelegten E-Mail-Domains (z. B. `@verein.de`).
-                </p>
-              </div>
-
-              <div className="p-4 rounded-sm bg-subtle border border-grid space-y-2">
-                <div className="flex items-center justify-between">
-                  <span className="font-bold text-main">Admin-Freischaltpflicht</span>
-                  <button
-                    onClick={() => handleToggleRestriction('approval', !requireApproval)}
-                    className={`px-3 py-1 rounded-sm text-xs font-bold transition border ${
-                      requireApproval ? 'bg-emerald-600 text-white border-emerald-500' : 'bg-surface text-muted border-grid'
-                    }`}
-                  >
-                    {requireApproval ? '[ AKTIV ]' : '[ INAKTIV ]'}
-                  </button>
-                </div>
-                <p className="text-[11px] text-muted font-sans">
-                  Erfordert die manuelle Freischaltung durch einen Admin vor der ersten Anmeldung.
-                </p>
-              </div>
-            </div>
-
-            {/* Allowed Domains List */}
-            {restrictionEnabled && (
-              <div className="space-y-3 pt-3 border-t border-grid">
-                <h4 className="font-serif text-sm font-bold uppercase text-main">Erlaubte E-Mail-Domains</h4>
-                <form onSubmit={handleAddDomainRule} className="flex gap-2">
+                <form onSubmit={handleCreateSkill} className="grid grid-cols-1 sm:grid-cols-12 gap-2 items-center">
                   <input
                     type="text"
-                    placeholder="z. B. verein.de oder @beispiel.org"
-                    value={newDomain}
-                    onChange={(e) => setNewDomain(e.target.value)}
-                    className="flex-1 px-3 py-1.5 rounded-sm input-field text-xs font-mono"
+                    required
+                    placeholder="Name der Qualifikation (z.B. Baristakurs)"
+                    value={newSkillName}
+                    onChange={(e) => setNewSkillName(e.target.value)}
+                    className="sm:col-span-5 bg-subtle border border-grid px-3 py-1.5 rounded-sm text-xs font-mono"
+                  />
+                  <input
+                    type="text"
+                    placeholder="Beschreibung (optional)"
+                    value={newSkillDesc}
+                    onChange={(e) => setNewSkillDesc(e.target.value)}
+                    className="sm:col-span-4 bg-subtle border border-grid px-3 py-1.5 rounded-sm text-xs font-mono"
                   />
-                  <button type="submit" className="px-4 py-1.5 rounded-sm bg-indigo-600 hover:bg-indigo-500 text-white font-bold text-xs">
-                    <Plus className="w-3.5 h-3.5 inline" /> Domain Hinzufügen
-                  </button>
-                </form>
-                <div className="flex flex-wrap gap-2">
-                  {domainRules.map(r => (
-                    <span key={r.id} className="px-2.5 py-1 rounded-sm bg-subtle border border-grid text-xs flex items-center gap-2">
-                      <strong className="text-main">{r.domain}</strong>
-                      <button onClick={() => handleDeleteDomainRule(r.id)} className="text-muted hover:text-red-400">
-                        <Trash2 className="w-3.5 h-3.5" />
-                      </button>
-                    </span>
-                  ))}
-                </div>
-              </div>
-            )}
-          </div>
-        </div>
-      )}
-
-      {/* TAB 2: VERANSTALTUNGEN */}
-      {activeAdminTab === 'events' && (
-        <div className="space-y-6 animate-in fade-in duration-150 font-mono">
-          <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
-            <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
-              Alle Veranstaltungen ({eventsList.length})
-            </h3>
-            <div className="space-y-3">
-              {eventsList.map(evt => (
-                <div key={evt.id} className="p-4 rounded-sm bg-subtle border border-grid flex items-center justify-between text-xs">
-                  <div>
-                    <h4 className="font-serif font-bold text-main text-sm">{evt.title}</h4>
-                    <p className="text-muted text-[11px]">
-                      {new Date(evt.start_date).toLocaleDateString('de-DE')} — {evt.location || 'Kein Ort'} | Erstellt von: {evt.created_by_name || 'Admin'}
-                    </p>
-                  </div>
-                  <div className="flex items-center gap-2">
-                    <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
-                      evt.is_active !== false ? 'bg-emerald-500/10 text-emerald-400 border-emerald-500/20' : 'bg-amber-500/10 text-amber-400 border-amber-500/20'
-                    }`}>
-                      {evt.is_active !== false ? 'AKTIV' : 'DEAKTIVIERT'}
-                    </span>
-                    <button
-                      onClick={async () => {
-                        if (window.confirm(`Möchtest du "${evt.title}" und alle Schichten wirklich unwiderruflich löschen?`)) {
-                          try {
-                            await apiFetch(`/events/${evt.id}/`, { method: 'DELETE' });
-                            onRefreshEvents();
-                          } catch (e) {
-                            alert(e.message);
-                          }
-                        }
-                      }}
-                      className="px-2.5 py-1 rounded-sm text-[10px] font-bold bg-red-500/10 hover:bg-red-500/20 text-red-400 border border-red-500/20 transition flex items-center gap-1"
-                      title="Veranstaltung löschen"
-                    >
-                      <Trash2 className="w-3 h-3" /> LÖSCHEN
-                    </button>
-                  </div>
-                </div>
-              ))}
-            </div>
-          </div>
-        </div>
-      )}
-
-      {/* TAB 3: VORLAGEN & QUALIFIKATIONEN */}
-      {activeAdminTab === 'templates' && (
-        <div className="space-y-6 animate-in fade-in duration-150 font-mono">
-          {/* Skills Management */}
-          <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
-            <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
-              Erforderliche Qualifikationen (Skills)
-            </h3>
-
-            <form onSubmit={handleCreateSkill} className="grid grid-cols-1 sm:grid-cols-3 gap-3">
-              <input
-                type="text"
-                placeholder="Skill Name (z. B. Bar-Erfahrung)"
-                required
-                value={newSkillName}
-                onChange={(e) => setNewSkillName(e.target.value)}
-                className="px-3 py-1.5 rounded-sm input-field text-xs font-mono"
-              />
-              <input
-                type="text"
-                placeholder="Beschreibung (optional)"
-                value={newSkillDesc}
-                onChange={(e) => setNewSkillDesc(e.target.value)}
-                className="px-3 py-1.5 rounded-sm input-field text-xs font-mono"
-              />
-              <div className="flex gap-2">
-                <input
-                  type="color"
-                  value={newSkillColor}
-                  onChange={(e) => setNewSkillColor(e.target.value)}
-                  className="w-8 h-8 rounded-sm border-0 cursor-pointer bg-subtle p-0.5"
-                />
-                <button type="submit" className="flex-1 px-3 py-1.5 rounded-sm bg-emerald-600 hover:bg-emerald-500 text-white font-bold text-xs">
-                  <Plus className="w-3.5 h-3.5 inline" /> Anlegen
-                </button>
-              </div>
-            </form>
-
-            <div className="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-3 pt-2">
-              {skills.map(s => (
-                <div key={s.id} className="p-3 rounded-sm bg-subtle border border-grid flex items-center justify-between text-xs">
-                  <div>
-                    <span style={{ color: s.color }} className="font-bold">{s.name}</span>
-                    {s.description && <p className="text-[11px] text-muted">{s.description}</p>}
-                  </div>
-                  <button onClick={() => handleDeleteSkill(s.id)} className="text-muted hover:text-red-400">
-                    <Trash2 className="w-3.5 h-3.5" />
-                  </button>
-                </div>
-              ))}
-            </div>
-          </div>
-
-          {/* Event Templates */}
-          <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
-            <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
-              Gespeicherte Event-Vorlagen ({templatesList.length})
-            </h3>
-            <div className="space-y-2">
-              {templatesList.map(t => (
-                <div key={t.id} className="p-3 rounded-sm bg-subtle border border-grid flex items-center justify-between text-xs">
-                  <div>
-                    <div className="font-bold text-main">{t.name}</div>
-                    <div className="text-[11px] text-muted">{t.description || 'Keine Beschreibung'}</div>
-                  </div>
-                  <button onClick={() => handleDeleteTemplate(t.id)} className="text-muted hover:text-red-400">
-                    <Trash2 className="w-4 h-4" />
-                  </button>
-                </div>
-              ))}
-            </div>
-          </div>
-        </div>
-      )}
-
-      {/* TAB 4: BRANDING & SYSTEM */}
-      {activeAdminTab === 'branding' && (
-        <div className="space-y-6 animate-in fade-in duration-150 font-mono">
-          <form onSubmit={handleSaveBranding} className="hallmark-panel rounded-sm p-6 border border-grid space-y-6">
-            <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2 flex items-center gap-2">
-              <Palette className="w-5 h-5 text-indigo-400" /> Portal Branding & Erscheinungsbild
-            </h3>
-
-            <div className="grid grid-cols-1 sm:grid-cols-2 gap-4 text-xs">
-              <div>
-                <label className="block text-muted mb-1">Anwendungs-Name</label>
-                <input
-                  type="text"
-                  required
-                  value={appName}
-                  onChange={(e) => setAppName(e.target.value)}
-                  className="w-full px-3 py-1.5 rounded-sm input-field font-bold"
-                />
-              </div>
-
-              <div>
-                <label className="block text-muted mb-1">Primärfarbe (Brand Accent)</label>
-                <div className="flex gap-2">
                   <input
                     type="color"
-                    value={primaryColor}
-                    onChange={(e) => setPrimaryColor(e.target.value)}
-                    className="w-9 h-9 rounded-sm border-0 cursor-pointer bg-subtle p-0.5"
+                    value={newSkillColor}
+                    onChange={(e) => setNewSkillColor(e.target.value)}
+                    className="sm:col-span-1 h-8 w-full cursor-pointer bg-subtle p-0.5 border border-grid rounded-sm"
                   />
+                  <button
+                    type="submit"
+                    className="sm:col-span-2 py-1.5 px-3 rounded-sm bg-surface hover:bg-surface-hover text-main border border-grid font-bold text-xs"
+                  >
+                    [ ANLEGEN ]
+                  </button>
+                </form>
+
+                <div className="flex flex-wrap gap-2 pt-2">
+                  {skills.map(sk => (
+                    <div
+                      key={sk.id}
+                      style={{ backgroundColor: `${sk.color}15`, borderColor: `${sk.color}35`, color: sk.color }}
+                      className="px-3 py-1 rounded-sm border font-bold text-xs flex items-center gap-2"
+                    >
+                      <span>{sk.name}</span>
+                      <button
+                        onClick={() => handleDeleteSkill(sk.id)}
+                        className="hover:opacity-80 transition text-red-400"
+                        title="Löschen"
+                      >
+                        <Trash2 className="w-3 h-3" />
+                      </button>
+                    </div>
+                  ))}
+                </div>
+              </div>
+
+              {/* Templates Management */}
+              <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4">
+                <h3 className="font-serif text-lg font-bold uppercase text-main border-b border-grid pb-2">
+                  Veranstaltungsvorlagen ({templatesList.length})
+                </h3>
+                <div className="space-y-2">
+                  {templatesList.map(t => (
+                    <div key={t.id} className="p-3 rounded-sm bg-subtle border border-grid flex items-center justify-between">
+                      <div>
+                        <div className="font-bold text-main">{t.name}</div>
+                        <div className="text-[11px] text-muted">{t.description || '[ Keine Beschreibung ]'}</div>
+                      </div>
+                      <button
+                        onClick={() => handleDeleteTemplate(t.id)}
+                        className="px-3 py-1.5 rounded-sm bg-red-500/10 hover:bg-red-500/20 text-red-400 border border-red-500/30 transition text-xs font-bold"
+                      >
+                        [ LÖSCHEN ]
+                      </button>
+                    </div>
+                  ))}
+                </div>
+              </div>
+            </div>
+          )}
+
+          {/* TAB 04: BRANDING & SYSTEM */}
+          {activeAdminTab === 'branding' && (
+            <form onSubmit={handleSaveBranding} className="hallmark-panel rounded-sm p-6 border border-grid space-y-6 font-mono text-xs">
+              <h3 className="font-serif text-xl font-bold uppercase text-main border-b border-grid pb-2">
+                Branding & Design-Einstellungen
+              </h3>
+
+              <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
+                <div>
+                  <label className="block text-main mb-1 font-bold">App-Name</label>
                   <input
                     type="text"
-                    value={primaryColor}
-                    onChange={(e) => setPrimaryColor(e.target.value)}
-                    className="flex-1 px-3 py-1.5 rounded-sm input-field font-mono"
+                    value={appName}
+                    onChange={(e) => setAppName(e.target.value)}
+                    className="w-full px-3 py-2 rounded-sm input-field text-xs"
+                  />
+                </div>
+
+                <div>
+                  <label className="block text-main mb-1 font-bold">Logo-URL (optional)</label>
+                  <input
+                    type="text"
+                    value={logoUrl}
+                    onChange={(e) => setLogoUrl(e.target.value)}
+                    placeholder="https://..."
+                    className="w-full px-3 py-2 rounded-sm input-field text-xs"
+                  />
+                </div>
+
+                <div>
+                  <label className="block text-main mb-1 font-bold">Primärfarbe (Akzent)</label>
+                  <div className="flex items-center gap-2">
+                    <input
+                      type="color"
+                      value={primaryColor}
+                      onChange={(e) => setPrimaryColor(e.target.value)}
+                      className="h-9 w-12 rounded-sm cursor-pointer bg-subtle p-1 border border-grid"
+                    />
+                    <input
+                      type="text"
+                      value={primaryColor}
+                      onChange={(e) => setPrimaryColor(e.target.value)}
+                      className="flex-1 px-3 py-2 rounded-sm input-field text-xs font-mono"
+                    />
+                  </div>
+                </div>
+
+                <div>
+                  <label className="block text-main mb-1 font-bold">Benachrichtigungstext (Banner oben)</label>
+                  <input
+                    type="text"
+                    value={bannerText}
+                    onChange={(e) => setBannerText(e.target.value)}
+                    placeholder="z. B. Willkommen zum Sommerfest-Schichtplan!"
+                    className="w-full px-3 py-2 rounded-sm input-field text-xs"
                   />
                 </div>
               </div>
 
-              <div className="sm:col-span-2">
-                <label className="block text-muted mb-1">Logo Bild-URL (optional)</label>
-                <input
-                  type="text"
-                  placeholder="https://beispiel.de/logo.png"
-                  value={logoUrl}
-                  onChange={(e) => setLogoUrl(e.target.value)}
-                  className="w-full px-3 py-1.5 rounded-sm input-field"
-                />
-              </div>
-
-              <div className="sm:col-span-2">
-                <label className="block text-muted mb-1">Ankündigung (Banner-Text)</label>
-                <textarea
-                  rows={2}
-                  placeholder="z. B. Willkommen beim Sommerfest Schichtplaner!"
-                  value={bannerText}
-                  onChange={(e) => setBannerText(e.target.value)}
-                  className="w-full px-3 py-1.5 rounded-sm input-field"
-                />
-              </div>
-            </div>
-
-            <h4 className="font-serif text-base font-bold uppercase text-main pt-4 border-t border-grid">
-              Startseiten Sidebar Boxen
-            </h4>
-
-            {/* Community Info Box Settings */}
-            <div className="p-4 rounded-sm bg-subtle border border-grid space-y-3">
-              <div className="flex items-center justify-between border-b border-grid pb-2">
-                <span className="font-bold text-xs uppercase text-main">📌 Verein & Infos Box</span>
-                <button
-                  type="button"
-                  onClick={() => setShowCommunityInfoBox(!showCommunityInfoBox)}
-                  className={`px-3 py-1 rounded-sm text-xs font-bold transition border ${
-                    showCommunityInfoBox ? 'bg-emerald-600 text-white border-emerald-500' : 'bg-surface text-muted border-grid'
-                  }`}
-                >
-                  {showCommunityInfoBox ? '[ AN ]' : '[ AUS ]'}
-                </button>
-              </div>
-
-              {showCommunityInfoBox && (
-                <div className="space-y-3 text-xs">
-                  <div>
-                    <label className="block text-muted mb-1">Titel</label>
+              {/* Info Box 1: Verein & Infos */}
+              <div className="p-4 rounded-sm bg-subtle border border-grid space-y-3">
+                <div className="flex items-center justify-between">
+                  <span className="font-bold text-main uppercase">Info-Box 1: Verein & Informationen</span>
+                  <input
+                    type="checkbox"
+                    checked={showCommunityInfoBox}
+                    onChange={(e) => setShowCommunityInfoBox(e.target.checked)}
+                    className="w-4 h-4 accent-indigo-500 cursor-pointer"
+                  />
+                </div>
+                {showCommunityInfoBox && (
+                  <div className="space-y-2">
                     <input
                       type="text"
                       value={communityInfoTitle}
                       onChange={(e) => setCommunityInfoTitle(e.target.value)}
-                      className="w-full px-3 py-1.5 rounded-sm input-field"
+                      className="w-full px-3 py-1.5 rounded-sm input-field text-xs font-bold"
                     />
-                  </div>
-                  <div>
-                    <label className="block text-muted mb-1">Inhalt</label>
                     <textarea
-                      rows={3}
+                      rows={2}
                       value={communityInfoText}
                       onChange={(e) => setCommunityInfoText(e.target.value)}
-                      className="w-full px-3 py-1.5 rounded-sm input-field"
+                      className="w-full px-3 py-1.5 rounded-sm input-field text-xs font-sans"
                     />
                   </div>
-                </div>
-              )}
-            </div>
-
-            {/* Support Box Settings */}
-            <div className="p-4 rounded-sm bg-subtle border border-grid space-y-3">
-              <div className="flex items-center justify-between border-b border-grid pb-2">
-                <span className="font-bold text-xs uppercase text-main">❤️ Unterstützen Box</span>
-                <button
-                  type="button"
-                  onClick={() => setShowSupportBox(!showSupportBox)}
-                  className={`px-3 py-1 rounded-sm text-xs font-bold transition border ${
-                    showSupportBox ? 'bg-emerald-600 text-white border-emerald-500' : 'bg-surface text-muted border-grid'
-                  }`}
-                >
-                  {showSupportBox ? '[ AN ]' : '[ AUS ]'}
-                </button>
+                )}
               </div>
 
-              {showSupportBox && (
-                <div className="space-y-3 text-xs">
-                  <div>
-                    <label className="block text-muted mb-1">Titel</label>
+              {/* Info Box 2: Unterstützen */}
+              <div className="p-4 rounded-sm bg-subtle border border-grid space-y-3">
+                <div className="flex items-center justify-between">
+                  <span className="font-bold text-main uppercase">Info-Box 2: Unterstützen & Mitmachen</span>
+                  <input
+                    type="checkbox"
+                    checked={showSupportBox}
+                    onChange={(e) => setShowSupportBox(e.target.checked)}
+                    className="w-4 h-4 accent-indigo-500 cursor-pointer"
+                  />
+                </div>
+                {showSupportBox && (
+                  <div className="space-y-2">
                     <input
                       type="text"
                       value={supportBoxTitle}
                       onChange={(e) => setSupportBoxTitle(e.target.value)}
-                      className="w-full px-3 py-1.5 rounded-sm input-field"
+                      className="w-full px-3 py-1.5 rounded-sm input-field text-xs font-bold"
                     />
-                  </div>
-                  <div>
-                    <label className="block text-muted mb-1">Inhalt</label>
                     <textarea
-                      rows={3}
+                      rows={2}
                       value={supportBoxText}
                       onChange={(e) => setSupportBoxText(e.target.value)}
-                      className="w-full px-3 py-1.5 rounded-sm input-field"
+                      className="w-full px-3 py-1.5 rounded-sm input-field text-xs font-sans"
                     />
                   </div>
-                </div>
-              )}
-            </div>
+                )}
+              </div>
 
-            <div className="pt-3 flex justify-end border-t border-grid">
-              <button
-                type="submit"
-                disabled={savingBranding}
-                style={{ backgroundColor: 'var(--brand-primary)' }}
-                className="px-6 py-2.5 rounded-sm text-xs font-mono font-bold text-white transition hover:brightness-110 shadow-sm"
-              >
-                {savingBranding ? 'Speichern...' : 'Einstellungen speichern'}
-              </button>
-            </div>
-          </form>
-        </div>
-      )}
-
-      {/* TAB 5: E-MAIL & SMTP EINSTELLUNGEN */}
-      {activeAdminTab === 'smtp' && (
-        <div className="space-y-6 animate-in fade-in duration-150 font-mono">
-          <form onSubmit={handleSaveSMTP} className="hallmark-panel rounded-sm p-6 border border-grid space-y-6">
-            <div className="flex items-center justify-between border-b border-grid pb-3">
-              <h3 className="font-serif text-lg font-bold uppercase text-main flex items-center gap-2">
-                <Mail className="w-5 h-5 text-indigo-400" /> SMTP Server & E-Mail-Versand
-              </h3>
-
-              <div className="flex items-center gap-2">
-                <span className="text-xs text-muted font-bold">SMTP-Versand:</span>
+              <div className="pt-2 flex justify-end">
                 <button
-                  type="button"
-                  onClick={() => setSmtpActive(!smtpActive)}
-                  className={`px-3 py-1 rounded-sm text-xs font-bold transition border ${
-                    smtpActive
-                      ? 'bg-emerald-600 text-white border-emerald-500 shadow-sm'
-                      : 'bg-subtle text-muted border-grid hover:text-main'
-                  }`}
+                  type="submit"
+                  disabled={savingBranding}
+                  className="px-5 py-2.5 rounded-sm bg-indigo-600 hover:bg-indigo-500 text-white font-bold text-xs"
                 >
-                  {smtpActive ? '[ AKTIV ]' : '[ INAKTIV (Dev Mode) ]'}
+                  {savingBranding ? '[ SPEICHERN... ]' : '[ BRANDING SPEICHERN ]'}
                 </button>
               </div>
-            </div>
+            </form>
+          )}
 
-            {!smtpActive && (
-              <div className="p-3.5 rounded-sm bg-amber-500/10 border border-amber-500/20 text-amber-500 text-xs flex items-center gap-2">
-                <AlertCircle className="w-4 h-4 shrink-0" />
-                <span>
-                  Hinweis: Im inaktiven Modus werden Bestätigungs-Links in der Entwickler-Konsole / Logs ausgegeben.
-                </span>
-              </div>
-            )}
+          {/* TAB 05: E-MAIL & SMTP */}
+          {activeAdminTab === 'smtp' && (
+            <div className="space-y-6 font-mono text-xs">
+              <form onSubmit={handleSaveSMTP} className="hallmark-panel rounded-sm p-6 border border-grid space-y-4">
+                <div className="flex items-center justify-between border-b border-grid pb-2">
+                  <h3 className="font-serif text-xl font-bold uppercase text-main flex items-center gap-2">
+                    <Mail className="w-5 h-5 text-purple-400" /> SMTP-E-Mail Konfiguration
+                  </h3>
+                  <label className="flex items-center gap-2 cursor-pointer font-bold">
+                    <span>SMTP Aktivieren:</span>
+                    <input
+                      type="checkbox"
+                      checked={smtpActive}
+                      onChange={(e) => setSmtpActive(e.target.checked)}
+                      className="w-4 h-4 accent-purple-500 cursor-pointer"
+                    />
+                  </label>
+                </div>
 
-            <div className="grid grid-cols-1 sm:grid-cols-2 gap-4 text-xs">
-              <div className="sm:col-span-2">
-                <label className="block text-main mb-1 font-bold">SMTP Host / Server Adresse</label>
-                <input
-                  type="text"
-                  placeholder="z. B. smtp.domain.de oder mail.gmx.net"
-                  value={smtpHost}
-                  onChange={(e) => setSmtpHost(e.target.value)}
-                  className="w-full px-3.5 py-2 rounded-sm input-field font-mono"
-                />
-              </div>
+                <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
+                  <div>
+                    <label className="block text-main mb-1 font-bold">SMTP Host</label>
+                    <input
+                      type="text"
+                      required={smtpActive}
+                      value={smtpHost}
+                      onChange={(e) => setSmtpHost(e.target.value)}
+                      className="w-full px-3 py-2 rounded-sm input-field text-xs"
+                    />
+                  </div>
 
-              <div>
-                <label className="block text-main mb-1 font-bold">SMTP Port</label>
-                <input
-                  type="number"
-                  placeholder="587 oder 465"
-                  value={smtpPort}
-                  onChange={(e) => setSmtpPort(e.target.value)}
-                  className="w-full px-3.5 py-2 rounded-sm input-field font-mono"
-                />
-              </div>
+                  <div>
+                    <label className="block text-main mb-1 font-bold">SMTP Port</label>
+                    <input
+                      type="number"
+                      required={smtpActive}
+                      value={smtpPort}
+                      onChange={(e) => setSmtpPort(e.target.value)}
+                      className="w-full px-3 py-2 rounded-sm input-field text-xs font-mono"
+                    />
+                  </div>
 
-              <div>
-                <label className="block text-main mb-1 font-bold">Absender E-Mail-Adresse (From)</label>
-                <input
-                  type="email"
-                  placeholder="noreply@verein.de"
-                  value={smtpFromEmail}
-                  onChange={(e) => setSmtpFromEmail(e.target.value)}
-                  className="w-full px-3.5 py-2 rounded-sm input-field font-mono"
-                />
-              </div>
+                  <div>
+                    <label className="block text-main mb-1 font-bold">Benutzername</label>
+                    <input
+                      type="text"
+                      value={smtpUsername}
+                      onChange={(e) => setSmtpUsername(e.target.value)}
+                      className="w-full px-3 py-2 rounded-sm input-field text-xs font-mono"
+                    />
+                  </div>
 
-              <div>
-                <label className="block text-main mb-1 font-bold">SMTP Benutzername / Login E-Mail</label>
-                <input
-                  type="text"
-                  placeholder="z. B. noreply@verein.de"
-                  value={smtpUsername}
-                  onChange={(e) => setSmtpUsername(e.target.value)}
-                  className="w-full px-3.5 py-2 rounded-sm input-field font-mono"
-                />
-              </div>
+                  <div>
+                    <label className="block text-main mb-1 font-bold">Passwort</label>
+                    <div className="relative">
+                      <input
+                        type={showSmtpPassword ? 'text' : 'password'}
+                        value={smtpPassword}
+                        onChange={(e) => setSmtpPassword(e.target.value)}
+                        className="w-full px-3 py-2 pr-10 rounded-sm input-field text-xs font-mono"
+                      />
+                      <button
+                        type="button"
+                        onClick={() => setShowSmtpPassword(!showSmtpPassword)}
+                        className="absolute right-2 top-2 text-muted hover:text-main"
+                      >
+                        {showSmtpPassword ? <EyeOff className="w-4 h-4" /> : <Eye className="w-4 h-4" />}
+                      </button>
+                    </div>
+                  </div>
 
-              <div>
-                <label className="block text-main mb-1 font-bold">SMTP Passwort</label>
-                <div className="relative">
+                  <div>
+                    <label className="block text-main mb-1 font-bold">Absender E-Mail</label>
+                    <input
+                      type="email"
+                      required={smtpActive}
+                      value={smtpFromEmail}
+                      onChange={(e) => setSmtpFromEmail(e.target.value)}
+                      className="w-full px-3 py-2 rounded-sm input-field text-xs"
+                    />
+                  </div>
+
+                  <div className="flex items-center gap-6 pt-5">
+                    <label className="flex items-center gap-2 cursor-pointer font-bold">
+                      <input
+                        type="checkbox"
+                        checked={smtpUseTls}
+                        onChange={(e) => {
+                          setSmtpUseTls(e.target.checked);
+                          if (e.target.checked) setSmtpUseSsl(false);
+                        }}
+                        className="w-4 h-4 accent-purple-500 cursor-pointer"
+                      />
+                      <span>TLS (STARTTLS)</span>
+                    </label>
+
+                    <label className="flex items-center gap-2 cursor-pointer font-bold">
+                      <input
+                        type="checkbox"
+                        checked={smtpUseSsl}
+                        onChange={(e) => {
+                          setSmtpUseSsl(e.target.checked);
+                          if (e.target.checked) setSmtpUseTls(false);
+                        }}
+                        className="w-4 h-4 accent-purple-500 cursor-pointer"
+                      />
+                      <span>SSL</span>
+                    </label>
+                  </div>
+                </div>
+
+                <div className="pt-2 flex justify-end">
+                  <button
+                    type="submit"
+                    disabled={savingSmtp}
+                    className="px-5 py-2.5 rounded-sm bg-purple-600 hover:bg-purple-500 text-white font-bold text-xs"
+                  >
+                    {savingSmtp ? '[ SPEICHERN... ]' : '[ SMTP EINSTELLUNGEN SPEICHERN ]'}
+                  </button>
+                </div>
+              </form>
+
+              {/* SMTP Test Section */}
+              <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-3">
+                <h4 className="font-serif text-lg font-bold uppercase text-main flex items-center gap-2">
+                  <Send className="w-4 h-4 text-purple-400" /> Test-E-Mail Senden
+                </h4>
+                <div className="flex gap-2">
                   <input
-                    type={showSmtpPassword ? 'text' : 'password'}
-                    placeholder="••••••••"
-                    value={smtpPassword}
-                    onChange={(e) => setSmtpPassword(e.target.value)}
-                    className="w-full pl-3.5 pr-10 py-2 rounded-sm input-field font-mono"
+                    type="email"
+                    placeholder="empfaenger@beispiel.de"
+                    value={smtpTestEmail}
+                    onChange={(e) => setSmtpTestEmail(e.target.value)}
+                    className="flex-1 bg-subtle border border-grid px-3 py-1.5 rounded-sm text-xs font-mono"
                   />
                   <button
                     type="button"
-                    onClick={() => setShowSmtpPassword(!showSmtpPassword)}
-                    className="absolute right-3 top-2.5 text-muted hover:text-main"
+                    disabled={testingSmtp || !smtpTestEmail.trim()}
+                    onClick={handleTestSMTP}
+                    className="px-4 py-1.5 rounded-sm bg-surface hover:bg-surface-hover text-main border border-grid font-bold text-xs disabled:opacity-50"
                   >
-                    {showSmtpPassword ? <EyeOff className="w-4 h-4" /> : <Eye className="w-4 h-4" />}
+                    {testingSmtp ? '[ SENDET... ]' : '[ TEST-MAIL SENDEN ]'}
                   </button>
                 </div>
               </div>
+            </div>
+          )}
 
-              <div className="sm:col-span-2 flex items-center gap-6 pt-2">
-                <label className="flex items-center gap-2 cursor-pointer text-main font-bold">
-                  <input
-                    type="checkbox"
-                    checked={smtpUseTls}
-                    onChange={(e) => {
-                      setSmtpUseTls(e.target.checked);
-                      if (e.target.checked) setSmtpUseSsl(false);
-                    }}
-                    className="rounded-sm"
-                  />
-                  <span>STARTTLS verwenden (Empfohlen für Port 587)</span>
-                </label>
+          {/* TAB 06: LIVE-SITZUNGEN & IP MONITORING */}
+          {activeAdminTab === 'sessions' && isSessionMonitorAuthorized && (
+            <div className="space-y-6">
+              <div className="hallmark-panel rounded-sm p-5 border border-grid space-y-4 font-mono text-xs">
+                <div className="flex items-center justify-between border-b border-grid pb-2">
+                  <div>
+                    <h3 className="font-serif text-lg font-bold uppercase text-main flex items-center gap-2">
+                      <Activity className="w-4 h-4 text-rose-400" /> Live-Sitzungen & Quell-IP Monitoring ({activeSessions.length})
+                    </h3>
+                    <p className="text-[11px] text-muted font-sans mt-0.5">
+                      Einsicht vorbehalten für Django-Benutzergruppe <strong>"{sessionMonitorGroupName}"</strong> & Superuser.
+                    </p>
+                  </div>
+                  <button
+                    onClick={fetchAdminData}
+                    className="px-3 py-1.5 rounded-sm bg-subtle hover:bg-surface-hover text-main border border-grid transition flex items-center gap-1 font-bold text-xs"
+                  >
+                    <Clock className="w-3.5 h-3.5" /> AKTUALISIEREN
+                  </button>
+                </div>
 
-                <label className="flex items-center gap-2 cursor-pointer text-main font-bold">
-                  <input
-                    type="checkbox"
-                    checked={smtpUseSsl}
-                    onChange={(e) => {
-                      setSmtpUseSsl(e.target.checked);
-                      if (e.target.checked) setSmtpUseTls(false);
-                    }}
-                    className="rounded-sm"
-                  />
-                  <span>SSL/TLS verwenden (Empfohlen für Port 465)</span>
-                </label>
+                <div className="overflow-x-auto">
+                  <table className="w-full text-left border-collapse text-xs">
+                    <thead>
+                      <tr className="border-b border-grid text-muted uppercase text-[10px]">
+                        <th className="pb-2 font-bold">Nutzer / Gast</th>
+                        <th className="pb-2 font-bold">Rolle / Status</th>
+                        <th className="pb-2 font-bold">Quell-IP</th>
+                        <th className="pb-2 font-bold">Letzte Seite (Pfad)</th>
+                        <th className="pb-2 font-bold">Sitzungsschlüssel</th>
+                        <th className="pb-2 font-bold text-right">Letzte Aktivität</th>
+                      </tr>
+                    </thead>
+                    <tbody className="divide-y divide-grid">
+                      {activeSessions.length === 0 ? (
+                        <tr>
+                          <td colSpan={6} className="py-6 text-center text-muted italic">
+                            Keine aktiven Sitzungen in den letzten 24 Stunden erfasst.
+                          </td>
+                        </tr>
+                      ) : (
+                        activeSessions.map((s) => (
+                          <tr key={s.id} className="hover:bg-subtle/50 transition">
+                            <td className="py-2.5 font-bold text-main">
+                              {s.display_name}
+                              {s.user && <span className="text-[10px] text-muted font-normal block">@{s.user.username} ({s.user.email})</span>}
+                            </td>
+                            <td className="py-2.5">
+                              <span className={`px-2 py-0.5 rounded-sm text-[10px] font-bold border ${
+                                s.user?.is_admin ? 'bg-indigo-500/10 text-indigo-400 border-indigo-500/20' : s.user ? 'bg-emerald-500/10 text-emerald-400 border-emerald-500/20' : 'bg-amber-500/10 text-amber-400 border-amber-500/20'
+                              }`}>
+                                {s.user?.is_admin ? 'ADMIN' : s.user ? 'BENUTZER' : 'GAST'}
+                              </span>
+                            </td>
+                            <td className="py-2.5 font-mono font-bold text-indigo-400">{s.ip_address}</td>
+                            <td className="py-2.5 font-mono text-muted">{s.last_path || '/'}</td>
+                            <td className="py-2.5 font-mono text-[10px] text-muted">{s.session_key}</td>
+                            <td className="py-2.5 text-right font-mono text-muted">
+                              {new Date(s.last_seen).toLocaleTimeString('de-DE', { hour: '2-digit', minute: '2-digit', second: '2-digit' })} Uhr
+                            </td>
+                          </tr>
+                        ))
+                      )}
+                    </tbody>
+                  </table>
+                </div>
               </div>
             </div>
-
-            <div className="pt-4 border-t border-grid flex flex-wrap items-center justify-between gap-3">
-              {/* Test Email Box */}
-              <div className="flex items-center gap-2 flex-1 min-w-[260px]">
-                <input
-                  type="email"
-                  placeholder="Empfänger für Test-E-Mail..."
-                  value={smtpTestEmail}
-                  onChange={(e) => setSmtpTestEmail(e.target.value)}
-                  className="px-3 py-1.5 rounded-sm input-field text-xs flex-1 font-mono"
-                />
-                <button
-                  type="button"
-                  disabled={testingSmtp}
-                  onClick={handleTestSMTP}
-                  className="px-3.5 py-1.5 rounded-sm text-xs font-mono font-bold bg-indigo-500/10 text-indigo-400 border border-indigo-500/20 hover:bg-indigo-500/20 transition flex items-center gap-1.5 shrink-0"
-                >
-                  <Send className="w-3.5 h-3.5" />
-                  {testingSmtp ? 'Sende...' : 'Test-Mail Senden'}
-                </button>
-              </div>
-
-              <button
-                type="submit"
-                disabled={savingSmtp}
-                style={{ backgroundColor: 'var(--brand-primary)' }}
-                className="px-6 py-2.5 rounded-sm text-xs font-mono font-bold text-white transition hover:brightness-110 shadow-sm flex items-center gap-2"
-              >
-                <CheckCircle2 className="w-4 h-4" />
-                {savingSmtp ? 'Speichern...' : 'SMTP-Einstellungen Speichern'}
-              </button>
-            </div>
-          </form>
-        </div>
+          )}
+        </>
       )}
     </div>
   );