More reliable membership magic-link sign-ins

Membership login links are now more resilient to automated email security scanners opening them before members do, reducing failed sign-ins and making recovery easier when a link has already been used.