Changing the way secrets are used so we can Heroku

Now we grab the secret info from ENV variables (for heroku deployment)
or failing that we default to Secret.py which is available in local
development. This way we don't have to juggle branches that include or
exclude Secrets.py and we won't accidentally reveal API keys on Github.