Never did that, but some of my apps that don't require strong security have a line in the configuration file that tells if it's in prod mode or debug mode and i

Never did that, but some of my apps that don't require strong security have a line in the configuration file that tells if it's in prod mode or debug mode and if it's in debug mode what user to emulate after a real, successful login. That debug config file is not checked in Git, so it never gets in places I don't want it. This way I do have to login, but I don't mess with test accounts or other people's passwords.