Authorized users only (email + password).
Tip: If you later want “Forgot password”, we’ll add a reset flow.