Change values in settings.py to use a seperate/dynamic/secure source

[growlf]

Example:

When talking (in the readme) about adding a real database back end, the current content suggests embedding the credentials in the settings file - this should never happen. Instead, the settings file should pull those values from either a secrets/config object or the environment within the container.

[growlf]

This may have been addressed while resolving another issue.