AUTH Sign In

Use tenant-aware OIDC in normal operation. Use Prod Sign in only for prod testing.