add settings.py without secret