switch to code first migrations + hide PRO connection string (put in azure itself)