add secret key to config/secrets.yml