update Gemfile.lock for heroku
configure secret token and figaro gem