deleted secret_token
added config for loading secrets.yml
this is a terrible commit message
added ENV for heroku token