moved passwords and secrets to figaro
figaro heroku problem
added signed cookies