Ensure settings are all accessible via env

[alisonrclarke]

Make sure all settings that the administrators might want to edit can be set in the environment, but define defaults in settings.py, i.e. Instead of using env('xxxx') we should use env.str('xxxx', 'default_value').