rm webapps and update secret key permissions, closes #7