[security] require json ~> 1.7.7
[security - heroku] ruby 1.9.2 -> 1.9.3
[security] optionally specify a new secret token using RAILS_SECRET_TOKEN