Site secrets from env

Site secrets are now taken from env to stop hacking by looking at git source.