moved SECRET_KEY to localsettings.py