Move off cookie sessions into django_sessions table

[ima-hima]

Also added settings.py and migrations to git repo and moved password and secret key out of settings into .env file.