Use email and password. For setup, passwords can be set directly in Supabase Authentication.
If login fails even with the right password, open the user in Supabase Authentication and set/update the password there.
Access will be restricted by GhostyBoy roles once staff/guest accounts are linked.