Group admin login

Use the same OTP flow for both roles. The successful login redirect is role-based.