Bypass Oauth for testing

[jberkus]

For interactive testing of election scenarios, we could really use the ability to have Oauth automatically succeed if the app is in Debug mode. That is, to have authentication work as whoever you say you are -- that would allow pretending to be all of the voters in an election.

I'd thought that adding an escape hatch to Oauth would be relatively straightforwards, but it has not been.