logdrop 1.4: login links that work once
logdrop has no passwords: maintainers sign in with a link emailed to an allow-listed address. Until today that link had a problem I didn't like. It was valid for 15 minutes, and during those 15 minutes anyone who had it could use it, as many times as they wanted, from as many browsers as they wanted, and every use opened its own 7-day session. A login link should be a key you use once, not a pass that works for a quarter of an hour. logdrop 1.4.0 fixes that, and rethinks sessions along the way.
