Move config.secret_token into application.rb