-- Secret-link login for the admin console.
--
-- A hashed token so you can log in by visiting /admin/<token> instead of typing
-- a password. Stored the same way as the password (bcrypt) — the plaintext
-- lives only in your bookmark. Password login stays as a fallback.

ALTER TABLE `cja_admin`
  ADD COLUMN `token_hash` varchar(255) DEFAULT NULL AFTER `password_hash`;