The expiry time of the token for the fake dev user was set to 1970, so you had to sign in with every request. Make it expire tomorrow instead.