No you're not, that's it! App would solve the SMS problem due to costs but all should be optional like: password login, sms temp password, email direct login link. It seems like it's different and maybe a bit harder to code, but it's not rocket science. :)