removed secret_key from settings.py as per #53 in deployment checklist