fixed urls, index, and secret key gen
fixed gunicorn requirement
static and allowed hosts for production