removed csrf middleware statements from config
added new production conf to use SQLite and local cache