Remind to set debug=false when using $_ENV vars

I'm not good at writing this kind of things, but I think it's important to remind people that these variables will be visible in the Woops exceptions if debug is true.

![Woops](http://imgur.com/aemuI7u "Screenshot")