Admin sign-in

Magic-link sign-in. Only emails on the allowlist will be granted admin access; others can request access via the public form.