added proper SECRET_KEY handling, split out site settings into a package, split out urls into a package, added sites fixture