bypass authorization by setting app.config["LASTUSER_TEST"] and app.lastuserdata and app.lastusertoken
- Redirect to next from login.
- Give authentication error if test params not set.