Few fixes to cover photos and bringing back secrets.yml

So I brought back Secrets.yml, because I misspoke -- while some people do use a .gitignore for this, Rails by default gives us a hint of what to do with this -- pull all the secret variables back into the ENV file.

So instead of getting rid of Secrets.yml, which will leave users who fork the app confused (where did secrets.yml go?) We keep it in, and pull the variables into the .ENV, and update the .env.sample to include the variables.