add the requested option to allow login via a link, and not just via a security code