Secure app_dev.php as per suggestion @DRvanR.