Demo login is pre-filled (a@b.com / test / coupon). Other valid emails still get a local session if Supabase sign-in does not apply.