Working secrets page -- updates with ajax and disallows seeing others shared secrets