Remove *_api_qa keys from secure settings template - they're not used in the code.  Turn Oauth credentials (key and secret) into secure settings.