Use secrets.yml to manage secret key for devise

We should also rename the DEVISE_SECRET environment variable to SECRET_KEY_BASE to keep it inline with the convention.