add secret.yml so heroku can read the secret_key_base environment variable