use secrets.yml in place of secret_token.rb [skip ci]