Fix handling of loading secrets with empty section
What does this MR do and why?
!166431 (merged)
refactored config/initializers/01_secret_token.rb, but it failed
in CNG builds if production
were present with an empty section.
This commit ensures that that secrets for a given environment are a hash.
Edited by Stan Hu