adjust configuration to new rails4 standards
use secret_key_base instead of secret_token
use strong parameters for user
removed link_to_function