added secret token (hopefully)
changed members list format in group show page.
fixed secret_token file to work locally and in heroku