It is used by `oauthlib` to bypass security checks. We need it because when running locally the OAuth callbacks are `http:`, not `https:`. Of course `DEBUG` shouldn't be set in production.