login required, production settings