Fix the way that the app loads WePay API credentials - move it into secrets.yml