Use staff email to verify against CMS registry
Demo staff password: realgard (optional in dev without email)