Update settings.py

hide password from settings.py