Demo accounts account1@demo.com / demo123
account2@demo.com / demo123
account3@demo.com / demo123
account4@demo.com / demo123
account5@demo.com / demo123

Rules - accountX@demo.com skips MFA if challenge passed in last 10 minutes
- accountX@demo.com otherwise challenges
- account2@demo.com is always blocked

other scenarios -> no Darwinium disposition -> default application logic