Ignored local environment setup
Changed config handling

Moved all config vars to the environment in which the app is run
(Heroku and .env locally).
Added api_secret (closes #27)

Added an api_secret key to prevent unauthorized use of the API.
Handled in main file, throws exceptions if there is no/invalid
api_secret.
Merge pull request #32 from linkyndy/security

Security