Updated app/oauth secure keys

They we're exposed in Travis before, so we got to keep them secret ;)
[ci skip]