{{/* The Oficina door (estilo chrome): one card on the suite's sky, Calls'
     mark and name at its head. The form, or once a link has been asked
     for, the check-your-email notice — or, on the way to Keymail, the
     door's notice with .Continue's meta refresh in head (renderKeymail).
     auth.go's localSignin builds the first two, refused the form with its
     403, and renderConfirm the confirm step. */}}
{{define "head"}}{{with .Continue}}{{template "home-oauth-head" .}}{{end}}{{end}}
{{define "content"}}
{{/* The confirm step an emailed link opens on (renderConfirm): the door
     with its address field taken away, and one Sign in button that posts
     the link's token back. GET /auth/verify spends nothing; this POST
     does. The token is the link's own query value, escaped here. */}}
{{with .Confirm}}{{template "estilo-door-open" .Door}}
  <h1>{{.Door.Heading}}</h1>
  {{- with .Door.Lede}}
  <p estilo-signin-lede>{{.}}</p>
  {{- end}}
  <form rst-form estilo-signin-form method="post" action="{{.Action}}">
    <input type="hidden" name="token" value="{{.Token}}">
    <div rst-form-foot><button rst-btn="primary" type="submit" autofocus>{{.Door.Submit}}</button></div>
  </form>
{{template "estilo-door-close"}}
{{- else}}{{if .Sent}}{{template "estilo-signin-sent" .Notice}}{{else}}{{template "estilo-signin" .Door}}{{end}}{{end}}
{{end}}