update to latest rails for security
change secret key to be obviously fake.  You should change your app key if you are using this in production somewhere