Staff sign-in uses company code + username. Managers can use email without a code.