Hide secret_key in local_settings

In the future this will be set before commiting to github so that
initial key isn't found in commit history...