Don't allow access to patients to users who are not signed in
Remove secret token from git
Use Discourse style secret token management