Separate db secrets out of appconfig.js
Whitelist appconfig, blacklist secret file
Merge pull request #15 from psybuzz/secret

Secret