fix so tests can run on localhost without secure config