secret values are now stored in the heroku config variables