Enable basicAuth only in production
Temporarily disable StatController policy