Code-based sign-in for the cold-call operator.
Only allowlisted emails can access coach. Unknown addresses get a polite refusal page.