Probably way too late for this notice to you to be of any use but I thought I'd point it out. `config/settings.py` has a plaintext password...