diff --git a/werkout_api/settings.py b/werkout_api/settings.py
index 72a8d6a..62bbae9 100644
--- a/werkout_api/settings.py
+++ b/werkout_api/settings.py
@@ -140,7 +140,7 @@ if os.environ.get("DATABASE_URL"):
     #         "APNS_USE_SANDBOX": False
     #     }
 
-    CSRF_TRUSTED_ORIGINS = ['https://*.werkout.io']
+    CSRF_TRUSTED_ORIGINS = ['https://*.werkout.fitness']
     SECRET_KEY = os.environ.get("SECRET_KEY", 'secret')
 
     # Parse the DATABASE_URL env var.
@@ -166,7 +166,7 @@ if os.environ.get("DATABASE_URL"):
 else:
     DEBUG = True
     ALLOWED_HOSTS = ['*']
-    SECRET_KEY = os.environ.get("SECRET_KEY", 'secret')
+    SECRET_KEY = 'django-insecure-o_0sbr3lxcy#_r#imo4tl0cw*%@*__2a48dcd6hbp&u9b5dx=1'
 
     DATABASES = {
         'default': {