Remind to set debug=false when using $_ENV vars

I'm not good at writing this kind of things, but I think it's important to remind people that these variables will be visible in the Woops exceptions if debug is true.

![Woops](http://i.imgur.com/aemuI7u.png "Screenshot")