* chore: implement device auth flow for fake idp
* chore: testIDP using static defaults for easier reuse