move database password out to localsettings.py