Only the host email can open admin. Guest booking does not use this page.
The link expires in 15 minutes. When SMTP_HOST is unset, the server logs the link instead of sending mail.