remove passwords from settings.py