Remove basic auth
Remove link edit user profile

We don't have any editable data - it all pulls from openid
Hide direct login option
Allow local auth in dev mode only