Few fixes to cover photos and bringing back secrets.yml

We should always give clear clues as to how to get the app up and running smoothly -- to generate secret tokens we can run rake secret at any time.