Demo mode

Demo login

Use demo@coiops.com / demo. Run npm run db:seed first. Session stays the demo cookie from this app — not a second auth provider.