move secrets.js up to the libs/ dir. it's useful that all code that uses...

move secrets.js up to the libs/ dir.  it's useful that all code that uses random strings routes through the same abstraction so that we can later improve a single function.  a central location makes this (more) obvious.