App submission: how to handle passwordless-only login for test credentials?