add stupid secret key

cookiecutter-django won't work otherwise