Fix security issue with dbconfig in production

The dbconfig controller should not be accessible in production as it exposes the database credentials and allows to change them.