Admin magic link

Dedicated back-office accounts, sessions, and passwordless sign-in. Public and organizer users are not used for admin authentication.