Add API_SECRET var to Heroku deployment setup