auth/utils: Consider staff users are privileged too

Staff users should also considered as privileged to test new features protected by authentication.

---

Migrated from D5796 (view on Phabricator)