testing settings for prod vs local

- this is not secure