Added a sample config.yml file

* if there is no config.yml, the secret token initializer
  automatically copies it over so that it's easier for people
  to contribute to the project :-)