Resolve Secret Token Issues

As identified in issue #5 - Best practice dictates `config/initializers/secret_token.rb` be excluded from the public repository. This interferes with successful build testing as well as potential deployment to PaaS providers directly from GitHub.

To resolve, set config.secret_key_base to the environment variable SECRET_TOKEN, and updated README installation instructions.