New users sign in with an invite link, or a temporary password issued by an admin (must be changed on first sign-in)