Client links now use One Time Password verification

We are now requiring OTP instead of email-link verification for client links: your client still gets the verification email, but instead of clicking a link, they only need to copy a short code from it and enter it right on the client link screen, instead of having to go through a redirect.