using figaro gem to hide secret keys and tokens