turn off debug, don't check in encrypted string.
fix vendor directory