Every web app should have a secret backdoor so that curious industry folks can look without messing analytics.
ie. curious.domain .com