add shrinkwrap, add coffee-script back, adjust fabfile
pull from OS env for secret key by default