DRY up node access and private site access
add pepper to settings.yml

this is the new way to set the password hash seed
it is used in the new devise branch of the portal
once all portals managed by chef are on the new devise branch
the sites_keys initializer can be removed