Fix app_dev.php security