---
name: purge-quick-login-from-loginpage
classification: fix
success_metric: |
  pages/login.js no longer ships alice123/bob123 in client HTML; smoke sign-in
  CTA unchanged.
status: shipped
created: 2026-05-26
closed: 2026-05-29
pr: 56
---

# Convoy: purge-quick-login-from-loginpage

**As-shipped:** PR #56 (`e0218e4`, 2026-05-29). Quick Login removed from `pages/login.js` (bundled with scanner a11y polish).

Remove production Quick Login buttons that exposed test-user passwords in
view-source HTML.

## Scope

- Delete Quick Login section + `handleQuickLogin` from `pages/login.js`
- Regression test: no quick-login copy or password literals in rendered output

## Out of scope

- Rotating alice/bob DB hashes (operators rotate manually if needed)
- `TESTING_GUIDE.md` dev account table (local QA reference only)