Click any user to sign in as them without a password. Disable this route before going live.