settings fix

Django requires that something be set for the SECRET_KEY. Our convention across projects is that it gets overridden in production by the *real* secret key in `local_settings.py` which Salt deploys to the correct location.