add application.yml file to hold all secret keys and update application.rb as per railscasts #85