move test settings to test_settings.py, add FIXME for resolver search list

make SECRET_KEY obviously non-secret and non-random + document it should be secret/random