Use dummy omniauth strategy except in production
Don't share secret_key_base with the world