Protect production app using HTTP basic authentication.