{{define "content"}}
{{/* estilo's sign-in page, or the sent state that replaces the form
     (estilo-signin, estilo-signin-sent; spec §9.2 and §9.3). One narrow,
     left-aligned column capped at 26rem, which fixes the old primary
     button stranded at the end of a 704px form. Every message comes from
     signinError's fixed set — there is no path from the URL into this
     page. */}}
{{/* The confirm step an emailed link opens on (renderConfirm): the door
     with its address field taken away, and one Sign in button that posts
     the link's token back. GET /auth/verify spends nothing; this POST
     does. The token is the link's own query value, escaped here. */}}
{{with .Data.Confirm}}{{template "estilo-door-open" .Door}}
  <h1>{{.Door.Heading}}</h1>
  {{- with .Door.Lede}}
  <p estilo-signin-lede>{{.}}</p>
  {{- end}}
  <form rst-form estilo-signin-form method="post" action="{{.Action}}">
    <input type="hidden" name="token" value="{{.Token}}">
    <div rst-form-foot><button rst-btn="primary" type="submit" autofocus>{{.Door.Submit}}</button></div>
  </form>
{{template "estilo-door-close"}}
{{- else with .Data.Sent}}{{template "estilo-signin-sent" .}}{{else}}{{template "estilo-signin" .Data.Form}}{{end}}
{{end}}