Secure login
Existing account access
Use a patient account for `/patient` or a ServiceCo staff account for `/staff`. Patient accounts continue to SMS verification; staff demo accounts require the MFA checkpoint before the signed session cookie is issued.