closing a "security hole"

Currently, a player can use the development mode even on the production server, by starting from the URL http://www-pg.iai.uni-bonn.de/battleships/place/AQEAAZYUAg==, and one doesn't even need to have knowledge of `key.aes` to come up with this link.