More security changes.

- Make the datasync post request only work on the dev server.