settings.py now contains db login info. must be ignored