add secret_key comments
switch wsgi.py to deployment.py settings