Dev mode. Auth is bypassed locally — no upstream login is performed.