use different var from django hashing secret key

Use a different variable to keep track of the secret key used for auth
against the SecretKeyMiddleware than the SECRET_KEY used as salt by
django in hashing so that the auth secret key can be easily changed
without affecting data locations etc.
Merge pull request #11 from amandeepgill-wf/separate-secrets

use different var from django hashing secret key