Staff sign in

Development email/password is only available when AUTH_DEV_BYPASS=true.