Add secrets.yml to work with Heroku

- All sensitive data no longer stored in secrets.yml