feature/settings-cleanup

Refactored the settings files so that sensitive data like the `LTI_OAUTH_CREDENTIALS` and the django `SECRET_KEY` are pulled from config files instead of hard coded. The config files are explicitly ignored by git, so that should prevent them from being committed accidentally.

@jazahn Review?