Clients use a magic link. Admins can sign in with email and password.