added secret
some fixes for heroku
carrierwave doesn't work in ajax, so form has been changed to synchronous