remove .secret file from .gitignore
with Heroku's .secret
Finish signup validation