Step 1 of 2: Email + Password, then OTP.