Using figaro to hide secret token, mailchimp, stripe and twitter, more left to do but its a start