added secres.yml to ignire
update gems and moved to mysql
removed unused OmniAuth:: Strategies
add a route for better testing
updated controllers and javascript

includes:
* app/parent messaging viar iframe postMessage
* redirectts
* refreshtokens