corrected devise secret token (hopefully)