We’ve considered killing our dev environments entirely but until then, we should put the dev env behind the WAF. This was done for tokenserver dev but never for syncstorage’s dev env. ┆Issue is synchronized with this [Jira Task](https://mozilla-hub.atlassian.net/browse/STOR-463)