fixed dev server UI auth