clean up settings (bug 999774)
clear out secret key and some pass flake8 (bug 999774)
change to sane default, but raise an error if its unchanged on prod (bug 999774)
Merge pull request #2102 from andymckay/999774

clean up settings (bug 999774)