imortant on security side: magic link will be enabled only for users who don't have password nor OIDC
prepare identity service for external users, support of: - magic_link (url challenge via email) - self issued oidc (eventually social login) - open cloud mesh