Removed secret from cookie (Heroku deploys generate one)
Added settings file to gitignore