Secure Loan CRM Login Page

I need a brand-new login page built for our in-house Loan CRM. Security is the priority: after the usual username-and-password step, users must receive a one-time code and be able to decide on the spot whether it is delivered by email or by text message.

The page has to slot cleanly into our existing PHP/Laravel back-end (if you prefer another framework, let me know why it would be a better fit) and work with our current MySQL user table. I will provide API keys for both our transactional email service and our SMS gateway so you can wire up the two delivery channels. Session handling, CSRF protection, rate-limiting, and modern hashing (bcrypt/argon2) are expected out of the box.

Deliverables
• Responsive login form styled to match our current dashboard theme
• Back-end logic to generate, send, and verify the one-time code
• Simple admin setting that lets us change code lifetime and lockout rules

I’ll test on a staging sub-domain first; once it’s solid, you’ll push to the production repo and supply a concise setup/rollback guide. Looking forward to your approach and timeline.