complete Phase I
don't forget to make sure we have a current user
complete Phase II: add friendships
make friending AJAXy
complete phase IV; also, retrofit nested route :-(
complete toggling of phase IV
move secret form to partial
write remote secrets form
add Tag/SecretTagging models
add underscore dependency
add secret tagging to form
add secret tag creation to controller