configure email on heroku
fix bad settings for AWS and TWILIO
do the SECRET_KEY the 'right' way