added secrets.yml
removed passwords