Move Rails secret_token to .env