heroku vulnerability fix
remove s3 keys from code