updated with secret token rails vulnerability fix