put secret keys in an ignored .h file and removed from app delegate