Standalone login (Plan B session bridge). In production this exchanges a ChefMix handoff token automatically; this picker stands in for that here.