added secret_key for devise
trying to get the secret_key from environment variables in heroku
added secrets.yml to tracking since it's using an environment variable on prod