A new browser gets a one-time code by email.