Few fixes to cover photos and bringing back secrets.yml

Also, be careful with stripping out files like secrets.yml through git commits -- imagine you had a password stored in commit A, and then you remove the file in commit B -- a malicious attacker could still go back to commit A and get a password / token that could be used against you.

You'll probably want to do instead something like this:
https://help.github.com/articles/remove-sensitive-data/

But if you do do this, I'd just rewrite secrets.yml to always have the ENV[] variable rather than strip out the entire file.