Allow site to run withouth secrets.py file

[sheenarbw]

We should use environmental variables and sensible defaults so people can get started easily.

Ideally we shouldn't need to authenticate with external services for local development at all.