Updated settings.py and settings.sample.ini

- ALLOWED_HOSTS are read from settings.ini
- Moved SECRET_KEY in settings.ini from "secrets" to "security" section
- Fixed bug in STATIC_ROOT sample config

With these settings and appropriate deployment config (see #217), it is now possible to deploy strongTNC with DEBUG=0.