reworked some of the config stuff

removed secret token for cookies from git
moved some configuration to a separate yaml file
updated nginx config to include roundcube