Google sign-in only. Allowed addresses come from AUTH_ALLOWED_EMAIL (comma-separated list).
Add AUTH_SECRET or NEXTAUTH_SECRET, plus AUTH_GOOGLE_ID and AUTH_GOOGLE_SECRET. Then either set AUTH_OPEN_SIGNUP=true for public access, or set AUTH_ALLOWED_EMAIL to one or more emails. Restart npm run dev.