Few fixes to cover photos and bringing back secrets.yml

Stripe does something similar to this so that after we use their token, we set it back to nil so it isn't used anywhere else.