ok it's not very secure but I put the prod credentials into the database script - it's only a play app:-)