bypass auth for dev mode