disabling security in dev environment