moved secret_key to application.yml, and minor tweaks to sauce.config