allow normal login in production