Email magic link login. No password.
Sessions last 24 hours. Single-use links expire after 15 minutes.