heroku compatibility

add rails_12factor gem
add devise secret and pepper