SMS verification required. Only allowlisted users can sign in.
Codes are texted only — never emailed.
