move private settings to local.py