adding secrets.yml to fix secret token issue