added copying of secrets file on deploy
added env driven config for production password