Two keys for stripe needed in secret.js

[ankitjaininfo]

Stripe integration requires two keys: secret key and publishable key. Both the keys should be used from config; right now one is in config, other is in .jade file.

This prevents stripe keys to be passed via env variables.

  stripe: {
    apiKey: process.env.STRIPE_KEY || 'sk_test_BQokikJOvBiI2HlWgH4olfQ2'
  }

[StephenPunwasi]

Actually since your secret.js isn't going to be published, you are supposed to input your Live Secret Key when you're ready to start taking customer payments.

The Live Publishable Key is for using in any code you might publish (or won't be as secure as your secret.js in deployment), and only has the ability to create a token in your Stripe account. You can't make actual charges with it.