Sign in
We email a link that signs you in on this device.
The link only works in the browser that asked for it, and only once. Access follows an active staff record — removing someone from staff removes their access at the next request, without anyone having to remember a password.
Why it reads that way. Telling an unknown address that it is unknown tells an attacker which addresses are real. Grid answers to a row in the staff table, and says so after sign-in rather than before it.