removed app secret and mysql info from server
added directory that contains app secret and mysql creds