Password login

Fallback for administrators. Everyone else should use the one-time code.

Sign in with a one-time code instead