Including secrets.yml

Remember to put all API keys and production secrets in .env when we add that