Only one account (one email) for a donnor is possible. If a donnor is entered multiple times, a case-fuse have to append

Patch the login process if the user is on the home page and not loggin in for the session_timeout period

Change the logic of the username determination for the user account requests (postgres sequence based)

Automatically call the /webauthn_begin_assertion endpoint to start the challenge/response process if there is only one security key active