Dev mode is on (ALLOW_DEV_LOGIN=true). Disable in production.