Admin sign-in

Sign-in uses a one-time code sent to m••••••••@gmail.com. There is no password to steal.

Codes expire after 10 minutes and work once. After 5 wrong tries the code stops working; after 10 wrong codes sign-in locks for 15 minutes. Every sign-in is logged.