[django 1.5] use a default (bad) secret key