moving secret info to hidden config/application.yml, thanks to figaro gem