Only authorising :body for production so we can test the iOS app.