webapp: use config/secrets.yml for our application secrets
This will move the secret parts of config/config.yml over.
secrets.yml is processed with erb and thus allows setting values based on the environment or other config files. As far as i know we are using /etc files to configure the webapp in production. Need to figure out a way to make this play nicely together.