move SECRET_KEY to local and heroku environment vars
update secret key in settings.py
update secret key in settings.py