No password. Staff are made by hand in the database, so a link to an address that is not staff signs nobody in.