9983d565

By: Michael Lynch <git@mtlynch.io>

Revise dev-mode auth to use token confirmation page

Dev mode now generates a real token and redirects to the same
confirmation page as production, instead of authenticating
directly on email lookup. This exercises the full token
consumption code path in dev and e2e tests.

Also add two-step token consumption (GET renders page, POST
consumes token) to handle email security scanners that
pre-click links in emails.

Co-authored-by: Shelley <shelley@exe.dev>

Timeline