Registration, bid selection, and submission. Run as a process, with a clear record of every step.
Links expire after 30 minutes. If the email has an account, a link is on its way.