Production sign-in uses Keystone (OIDC). Development-only login is refused when NODE_ENV=production.
Sign in with Keystone (available only when OIDC is configured)