change handling of token and add private vars
update devise views
init private.yml
fix usage of private.yml