Use registered email and mobile number for verification.
Staff passwords must be changed every 90 days. Super Admin is excluded.
Create the first protected Super Admin user. This is not demo data and appears only once.