Sign-in is restricted to `.edu` email addresses. Google OAuth is the intended production path, and local dev login is available while the app is being built.
Google OAuth is configured for this environment.