Magic-link sign-in. Email must be on the allowlist.