Add secret token (lol), and ditch database.yml