added config/secrets.yml with all values set to come from environment variables