agenticjobs had an SMTP_URL that nothing read, so the no-mail-server branch was true on every board, and the login page handed a working sign-in link to whoever typed an address.
Read the original (By Anthony Ettinger, via Chovy's Blog): https://dev.profullstack.com/~anthony/blog/095-post.html
