Test environment let anyone access live customer data

Even a temporary staging server needs to be locked down.