add config/secrets to make heroku happy