refactor secrets to use the app config method, closes #114