Move API secrets and keys to config.json