[ToDo] Debug and setting config before launch

[William-An]

What is this todo related to?

frontend backend

What is the todo?

Remove debug information from site to prevent expose critical information to public.

1. [x] Frontend
2. [x] Backend
   1. [x] Django in debug
   2. [x] DRF remove broswable API
   3. [x] Remove any sensitive information like secret key or db connection info
   4. [x] Replace the secret key via setting it in production directly and not store in files

How urgent is the todo?

Before v1.0.0b

Additional context Add any other context about the problem here.