Use same auth fixtures for sandbox and demo

Makes things less confusing, and the hosted demo site has different
fixtures anyway.