Ignored local environment setup
Changed config handling and added api_secret

Moved all config vars to the environment in which the app is run
(Heroku and .env locally).
Also, added api_secret.
Merge pull request #4 from linkyndy/security

Security