Improve the sign-in process

[avenmia]

The current sign-in/create account implementation uses NextAuth's email provider to send magic links to user's email that they can use to log in. If there is an existing account it retrieves the user's data from the database, otherwise it creates a new account.

One pain point for users was that they couldn't remember their email passwords. They would be signed in to their email on their phone, but since they were using the workshop's computer, they wouldn't be able to use the magic link.

The goal of this issue is to come up with an alterative way for people to sign-in/create an account so that they don't need to remember their email passwords.

Notes:

• I think it's best the solution doesn't end up storing user's passwords
• An idea I had was that we could maybe display the sign-in link in the email and have it pass through a URL shortener so that they could type it into their browser

References:

• https://next-auth.js.org/

[dinoboy197]

This could be tricky. When a user wants to sign in on a computer they haven't signed in on before, they need to "prove" that they are who they say that they are. Typical ways to do that include typing in a password on the website, or clicking a magic link. If the user can't "prove" that they are who they say that they are, then there isn't too much we can do to help them.