Mock authentication for demonstration only. No password is required and the session cookie is not signed.