When signing in from mobile phone, send OTP and authentication link.

The link is only valid from the same browser.

Fixes #65