set DEBUG back to True for dev, and generate a new secret key and store it in env var instead of in settings directly