removed HARNESS_ACTIVE in _basedir (insecure when testing apps where qaptcha is used