Platform sign-in

Operator credentials, then a one-time code.