Moved secrets to ENV variables, added secrets.yml for heroku deployment