"sign-in is a magic link" — one field, no password. The visual only; wire it to your own auth.