Implement safe way to get env variable in settings files
Move facebook secret key from the settings. Add it as an environment variable
No need for a real secret key for development. Use env variable secret key for production only
Simillary, there is no need to keep local DB password secret. Hardcoded...
Fine tuning login and register templates
Fine tune add candidate page