Recruiters sign in with a magic link. Administrators use a password.
New accounts start as pending until an administrator approves them.
