make separate config.js for secrets / local config options
get sendpush methods to return deferred objects