move secret settings (db connection and django secret_key) to a separate file settings_secret.py. Stop ignoring settings.py and start ignoring settings_secret.py