Set the scope for login route
Players need the official account entry point, password recovery and a way to distinguish a live session from a copied sign-in form. Save the exact hostname, TLS state, landing URL after sign-in and the recovery email domain. Open the route from a clean bookmark rather than a message or advert. Timestamp each capture and keep the account state visible.
