Refactored dev/prod settings.

- removed database credentials and secret key from VCS
- ignore static files
- separate dev/prod local_settings for app secrets
- added checks to manage.py and wsgi.py for current environment