move DEBUG to secret settings so don't have to change it between devbox and server