1. move sensitive data to external config
2. add twilio and socket.io