Services that send “magic links” instead of a sodding demand for a password suck. Absolutely suck.