Allow Signon permission/sign out push API to work

This works in production because this file is overwritten with one which
contains these credentials.