Secure admin access by magic link.
If the SMTP password is still a placeholder, the magic link cannot be sent yet.