Updated to latest gems + moved secret to server

the secret words were moved to the server code, still static but can
now be managed server side
Experiencing two javascript errors that need to be fixed.