security hardening after discussion with Colton

Debug mode needs to be hard-coded so that you can't get at maintenance hooks unless you  are an admin