remove the need for settings/local.py (bug 999774)

I don't see ``APP_PURCHASE_SECRET`` and ``SECRET`` in the validate_settings() nag. They should be in there.