make secrets.txt creation part of the first time init as it needs to created as the django-app user, not as www-data