Using mocked-auth instead of dummy-auth

[danjoa]

I recognised you've dummy-auth configured with certain users, yet dummy-auth never asks for login and always uses privileged as user → you likely meant mocked-auth.

As a side thing: mocked-auth accepts any passwords, if you leave omit the password property → much better for test-drives and demos.