Add production secret for testing purposes

this is unsecure but ok for a testing only purpose (will be deployed on
local box only)