use different var from django hashing secret key

Use a different variable to keep track of the secret key used for auth
against the SecretKeyMiddleware than the SECRET_KEY used as salt by
django in hashing so that the auth secret key can be easily changed
without affecting data locations etc.

@shawnrusaw-wf @lyddonb