*Login* works if the account exists. *Signup* requires a valid invite code and creates the account.

Notes:
• Passwords are stored hashed.
• Web chats always post to Discord (audit log).
• If “Signup” is disabled later, it’s because you’ve locked it to one account.