Member access

Secure login with server-backed sessions

Password sign in is now the primary path, with optional email-code access still available for accounts that need it.