⚡ Demo: any login always fails (mock auth)