Update settings.py

Security!