fix #3, fix #6 (upgrade ruby & rails); better key privacy with secrets.yml