config for Heroku deploy
secure token
minor change in todo