Make app visible only to owners

@exalted here we go! 

I enabled the authentication on production only: both development and test shouldn’t be aware of this temporary solution.