Magic link sign in.

Single allow-listed user. Token expires in one hour.