manage secret_token

  Fixes #14
  Remove token from repository
  Use initializer to generate one if not present
  Store it in config/secret_token.yml (gitignored)
add mention of secret_token in README
Merge pull request #33 from josqu4red/secret_token

manage secret_token