Keep secret token secret

Since we, uh, don't even have a login system right now, I'm not sure that this is such a priority.  But I've modified the deploy task so that it doesn't use the secret_token.rb we have checked into the repository.