moving all secret info to config/application.yml, not included in git. using figaro gem for this