added secrets.yml to commit list and fixed a bug in auth_controller