moved SECRET_KEY to LOCAL_SETTINGS