Magic link sign-in only. No passwords.
In development, links are printed to the server log if no email provider is configured.