A clickable multi-factor authentication link, valid for 20 minutes, is sent to users via email to verify identify upon log in.

POC only - delete or hide after use