update Gemfile, set devise config.secret