Hide secret_key in local_settings

AND generate new key! In the future this will be set before commiting to
github so that initial key isn't found in commit history...