Fixing report and hiding secret_token

Heroku dynos are fast! Very fast!
So the report request comes in with a time that is still the present from pagseguro's point of view and the report fails.
Setting the end time to be in the past (1 minute) is enough.
Also hiding the secret_token because it should not be under version control :)