Sign in with a magic link. Operator allowlist applies after auth.