remove credentials from settings.py