rename SECRET_TOKEN to RAILS_SESSION_SECRET