Moved 'secret' into a separate config file
Removed config.js and use of express.secret as it's not really needed