[auth]
login_mode         = "modal"   # "modal" | "page"
otp_store          = "memory"  # "memory" | "db"
otp_expiry_minutes = 10
otp_max_attempts   = 3
otp_code_length    = 6
registration_role  = "user"    # role assigned on new user registration — must exist in site/config/roles.ncl