Handle warning about using development auth0 keys in production

[bendnorman]

We're currently using development auth0 tokens and auth0 recommends we don't do this in production. I don't understand what we have to do at this point but I think we should address it before we release it to the public.