improve secret token handling
Improve secret token setting
Add precompiled assets to git

This is not my desired long-term solution, but I can't figure
out why heroku's currently not running the precompile step
(it's supposed to). Need to revisit this.