Dev only

Skips the magic link — mints a session instantly. Never enabled in production.