move credentials in settings.py