allow login out of production