stop requiring secret keys in development and test