Especially for dev, this might be better (instead of password auth)?

CookieAuthentication 1
CookieAuthFileGroupReadable 1