Developer sign-in

DEV_AUTH is enabled, so you can sign in without Auth0. Never enable this in production.