index_dev should be only callable on localhost